MUST READ

Cyberattacks on Oil Tankers Put Maritime Critical Infrastructure at Risk

 | 

SilkParasite Infrastructure Links SpiceRAT to Central Asian Targets

 | 

NightmareStresser Goes Offline in Global DDoS-for-Hire Crackdown

 | 

U.S. CISA adds Acronis Backup, Cisco ISE, and Google Pixel flaws to its Known Exploited Vulnerabilities catalog

 | 

Chosen Brick, Iran's Surveillance Malware

 | 

BambooToken: The Malware That Speaks MQTT to Stay Under the Radar

 | 

Google Patches Pixel Modem Zero-Day Exploited in Targeted Attacks

 | 

Revolut Data Leak May Trace Back to Compromised Italian Government Accounts

 | 

Texas Utility CenterPoint Energy Confirms Data Breach After Hacker Claims 7.49M Records Stolen

 | 

U.S. CISA adds Cisco Secure Email Gateway flaw to its Known Exploited Vulnerabilities catalog

 | 

Cisco Warns of Ongoing Exploitation of Critical Email Gateway Zero-Day

 | 

Shared Hosting at Risk: LiteSpeed Enterprise Bug Can Grant Root from a Single Tenant

 | 

One Exploit Chain, Two Espionage Campaigns: Chrome and Windows Under Fire

 | 

Telegram Desktop Flaw Could Turn Old Chat Exports Into Data Theft Traps

 | 

Non-Zero-Day VPN Flaw Left Japan 's Government Shared Network Platform Exposed: 246,000 Records at Risk

 | 

ENISA: Frontier AI Is Changing the Speed of Cyberattacks. Europe Needs to Catch Up

 | 

China Calls Amodei’s AI Proposal a New Cold War Playbook

 | 

U.S. CISA adds GitLab, JFrog Artifactory, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog

 | 

Dutch NCSC Warns: Critical Check Point VPN Flaws Put Networks at Risk

 | 

Anthropic CEO Calls for an AI Slowdown. Is It Possible?

 | 

CVE-2025-53521

Pierluigi Paganini September 09, 2026
PoisonedRefresh: A Fileless Linux Rootkit That Injects PHP Web Shells Into F5 BIG-IP APM Server Memory

PoisonedRefresh rootkit injects PHP web shells into F5 BIG-IP APM Apache memory, leaving no disk artifacts. SophosLabs published a detailed technical analysis on September 8, 2026, of a Linux implant, dubbed PoisonedRefresh by ESET, they found in compromised F5 BIG-IP Access Policy Manager environments. Sophos tracks it as Linux/Agnt-IC. F5 has confirmed exploitation of the […]

Pierluigi Paganini April 06, 2026
Attackers Exploit RCE Flaw as 14,000 F5 BIG-IP APM Instances Remain Exposed

Over 14,000 F5 BIG-IP APM instances remain exposed online, as attackers actively exploit a critical remote code execution flaw CVE-2025-53521. Over 14,000 F5 BIG-IP APM instances remain exposed online, with attackers actively exploiting the critical remote code execution vulnerability CVE-2025-53521 (CVSS ver. 3.1 score of 9.8), the nonprofit security organization Shadowserver warns. The vulnerability in BIG-IP […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

Cyberattacks on Oil Tankers Put Maritime Critical Infrastructure at Risk

Hacking / September 17, 2026

SilkParasite Infrastructure Links SpiceRAT to Central Asian Targets

APT / September 17, 2026

NightmareStresser Goes Offline in Global DDoS-for-Hire Crackdown

Cyber Crime / September 17, 2026

U.S. CISA adds Acronis Backup, Cisco ISE, and Google Pixel flaws to its Known Exploited Vulnerabilities catalog

Security / September 17, 2026

Chosen Brick, Iran's Surveillance Malware

Malware / September 17, 2026