MUST READ

Australia Alerts Organizations to Ongoing CMS Exploitation Attacks

 | 

Ryuk Ransomware Member Pleads Guilty Over Attacks on U.S. Organizations

 | 

Progress Told ShareFile Customers to Pull the Plug on Their Servers. Here's What We Know.

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 105

 | 

Security Affairs newsletter Round 585 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

U.S. CISA adds iCagenda and Balbooa Forms flaws to its Known Exploited Vulnerabilities catalog

 | 

Critical U-Boot Bugs Undermine Secure Boot on Millions of Devices

 | 

Update Now: Critical Zimbra Classic Web Client Flaw Could Expose Mailboxes

 | 

Ransomware Never Stopped: Over 9,000 Confirmed Attacks Since 2018

 | 

222 GitHub Repositories Linked to Fake Go Package Malware Operation

 | 

Former Ransomware Negotiator Sentenced to 70 Months in Prison for Secretly Helping BlackCat Gang

 | 

GigaWiper Merges Three Malware Families Into One Destructive Backdoor

 | 

INTERPOL Operation First Light Nets 5,811 Arrests and Seizes $293 Million

 | 

GodDamn Ransomware Uses PoisonX to Blind Security Software

 | 

AssuranceAmerica Breach Exposes 7 Million Driver’s Licenses After Employee Account Hack

 | 

Microsoft fixed Defender flaw RoguePlanet (CVE-2026-50656)

 | 

Fake VPN and 7-Zip Apps Turn Victims Into Residential Proxy Nodes

 | 

Ubiquiti Patches Critical UniFi OS Flaws Allowing Command Injection and Privilege Escalation

 | 

A Hacker Claims 35 GB of Accenture Source Code. The Company discloses the data breach

 | 

Telegram-Hosted RedWing Malware Lets Anyone Rent Android Spyware Tools

 | 

LATEST NEWS

VIEW ALL
Security
Australia Alerts Organizations to Ongoing CMS Exploitation Attacks
Pierluigi Paganini July 13, 2026

Australia warns of a global campaign exploiting CMS flaws to deploy webshells on WordPress, Joomla, and other websites. Australia's Signals Directorate has issued an alert about a large-scale expl ...

Uncategorized
Ryuk Ransomware Member Pleads Guilty Over Attacks on U.S. Organizations
Pierluigi Paganini July 12, 2026

An alleged Ryuk ransomware member pleaded guilty in the U.S. for helping deploy attacks on American companies and faces up to 15 years in prison. Armenian national Karen Serobovich Vardanyan (34) ...

Hacking
Progress Told ShareFile Customers to Pull the Plug on Their Servers. Here's What We Know.
Pierluigi Paganini July 12, 2026

Progress urged ShareFile Storage Zone customers to shut down internet-facing servers immediately over a credible security threat under investigation. Progress Software sent an urgent email to Shar ...

Breaking News
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 105
Pierluigi Paganini July 12, 2026

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Novel Java-Based QuimaRAT Targets Window ...

top articles

Hackers access Booking.com user data, company secures systems
April 13, 2026
Inside ZionSiphon: politically driven malware aims at Israeli water systems
April 17, 2026
RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
April 23, 2026
Checkmarx supply chain attack impacts Bitwarden npm distribution path
April 24, 2026
Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed
April 26, 2026

newsletter

Subscribe to my email list and stay
up-to-date!

most popular

VIEW ALL
Security

Australia Alerts Organizations to Ongoing CMS Exploitation Attacks

July 13, 2026

Uncategorized
Ryuk Ransomware Member Pleads Guilty Over Attacks on U.S. Organizations

July 12, 2026

Hacking
Progress Told ShareFile Customers to Pull the Plug on Their Servers. Here's What We Know.

July 12, 2026

Breaking News
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 105

July 12, 2026

Breaking News
Security Affairs newsletter Round 585 by Pierluigi Paganini – INTERNATIONAL EDITION

July 12, 2026

recent articles

Security
Australia Alerts Organizations to Ongoing CMS Exploitation Attacks

Australia warns of a global campaign exploiting CMS flaws to deploy webshells on WordPress, Joomla, and other websites. Australia's Signals Directorate has issued an alert about a large-scale expl ...

Pierluigi Paganini July 13, 2026
Uncategorized
Ryuk Ransomware Member Pleads Guilty Over Attacks on U.S. Organizations

An alleged Ryuk ransomware member pleaded guilty in the U.S. for helping deploy attacks on American companies and faces up to 15 years in prison. Armenian national Karen Serobovich Vardanyan (34) ...

Pierluigi Paganini July 12, 2026
Hacking
Progress Told ShareFile Customers to Pull the Plug on Their Servers. Here's What We Know.

Progress urged ShareFile Storage Zone customers to shut down internet-facing servers immediately over a credible security threat under investigation. Progress Software sent an urgent email to Shar ...

Pierluigi Paganini July 12, 2026
Breaking News
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 105

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Novel Java-Based QuimaRAT Targets Window ...

Pierluigi Paganini July 12, 2026
Breaking News
Security Affairs newsletter Round 585 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini July 12, 2026
Security
U.S. CISA adds iCagenda and Balbooa Forms flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds iCagenda and Balbooa Forms flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Securit ...

Pierluigi Paganini July 11, 2026
Security
Critical U-Boot Bugs Undermine Secure Boot on Millions of Devices

Binarly found six U-Boot flaws, including two that enable code execution during boot image verification, impacting 50+ releases. Binarly's research team has found six vulnerabilities in U-Boot, th ...

Pierluigi Paganini July 11, 2026
Hacking
Update Now: Critical Zimbra Classic Web Client Flaw Could Expose Mailboxes

Zimbra addressed a critical stored XSS vulnerability in its Classic Web Client that lets malicious emails execute code when opened. Zimbra has released version 10.1.19 to fix a critical stored XSS ...

Pierluigi Paganini July 10, 2026
Cyber Crime
Ransomware Never Stopped: Over 9,000 Confirmed Attacks Since 2018

Ransomware remains above 1,400 attacks yearly since 2023. Qilin leads in 2026, while the U.S. remains the main target. Ransomnews has independently confirmed 9,291 ransomware attacks worldwide bet ...

Pierluigi Paganini July 10, 2026
Security
222 GitHub Repositories Linked to Fake Go Package Malware Operation

Researchers uncovered 222 GitHub repositories spreading malware through fake Go packages, delivering loaders, stealers, RATs, and cryptominers. Socket's security research team started with the inv ...

Pierluigi Paganini July 10, 2026
Cyber Crime
Former Ransomware Negotiator Sentenced to 70 Months in Prison for Secretly Helping BlackCat Gang

A former ransomware negotiator was sentenced to nearly six years for secretly helping BlackCat extort victims while betraying his clients. A U.S. court sentenced former ransomware negotiator Angel ...

Pierluigi Paganini July 10, 2026
Malware
GigaWiper Merges Three Malware Families Into One Destructive Backdoor

Microsoft uncovered GigaWiper, a modular Go backdoor combining three malware families with espionage, remote control, and destructive wiping features. In October 2025, Microsoft's threat intellige ...

Pierluigi Paganini July 10, 2026
Security
INTERPOL Operation First Light Nets 5,811 Arrests and Seizes $293 Million

INTERPOL's Operation First Light 2026 led to 5,811 arrests, blocked $293M in criminal assets, and disrupted global fraud and money laundering networks. INTERPOL coordinated a four-month operation ...

Pierluigi Paganini July 09, 2026
Malware
GodDamn Ransomware Uses PoisonX to Blind Security Software

GodDamn ransomware uses the signed PoisonX driver to disable security tools, marking a more advanced version of the Beast ransomware family. Symantec's Threat Hunter Team found a new ransomware fa ...

Pierluigi Paganini July 09, 2026
Data Breach
AssuranceAmerica Breach Exposes 7 Million Driver’s Licenses After Employee Account Hack

AssuranceAmerica confirmed a breach exposing nearly 7 million driver's licenses after hackers compromised an employee account and stole customer data. U.S. auto insurer AssuranceAmerica has confir ...

Pierluigi Paganini July 09, 2026
Security
Microsoft fixed Defender flaw RoguePlanet (CVE-2026-50656)

Microsoft fixed RoguePlanet (CVE-2026-50656), a Defender flaw allowing local attackers to gain higher privileges through the Malware Protection Engine. Microsoft released security updates for Rogu ...

Pierluigi Paganini July 09, 2026
Malware
Fake VPN and 7-Zip Apps Turn Victims Into Residential Proxy Nodes

Fake apps like WireVPN and a trojanized 7-Zip turn victims' devices into residential proxies, letting criminals route traffic through their IPs. Infoblox's threat research team started pulling on ...

Pierluigi Paganini July 09, 2026
Security
Ubiquiti Patches Critical UniFi OS Flaws Allowing Command Injection and Privilege Escalation

Ubiquiti patched seven UniFi OS flaws, including critical CVE-2026-50746, which allows command injection in UniFi Connect Application. Ubiquiti released security updates for seven critical UniFi O ...

Pierluigi Paganini July 08, 2026
Data Breach
A Hacker Claims 35 GB of Accenture Source Code. The Company discloses the data breach

Accenture confirmed a breach after a hacker claimed to steal 35 GB of source code, keys, and Azure credentials now offered for sale. A threat actor using the handle "888" claimed on the cybercrime ...

Pierluigi Paganini July 08, 2026
Malware
Telegram-Hosted RedWing Malware Lets Anyone Rent Android Spyware Tools

RedWing: The Android Banking Trojan You Can Rent on Telegram for Less Than a Coffee Subscription Zimperium's zLabs team has uncovered RedWing, an Android spyware operation sold as a subscription s ...

Pierluigi Paganini July 08, 2026