MUST READ

VOLTA, the infostealer that asks an AI which victims are worth the effort

 | 

New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia

 | 

Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens

 | 

Chainalysis Investigates Security Incident Involving AI-Driven Attack Techniques

 | 

FBI Blames North Korea for $6 Billion Binance Crypto Theft

 | 

SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 6

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 121

 | 

Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

SMS of Death: Android under attack, an invisible SMS can block calls and emergency services

 | 

U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog

 | 

Attackers Exploit Critical Drupal Commerce Core Vulnerability CVE-2026-118539

 | 

Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries

 | 

U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog

 | 

$6.3 Billion Stolen from Binance in Attack Attributed to North Korea

 | 

How to prioritize remediation after a pentest: a practitioner workflow

 | 

Hacker leaks data on more than 40,000 Homeland Security employees

 | 

Binance Investigates Suspicious Crypto Transfers Worth Up to $5.8 Billion

 | 

US Probes Suspected Hack Behind Military Base Freezer Failures

 | 

484,142 Exposed Cloud Buckets Contain 18 Billion Files

 | 

U.S. CISA adds Linux Kernel and Broadcom VMWare ESX  flaws to its Known Exploited Vulnerabilities catalog

 | 

CVE-2026-104935

Pierluigi Paganini October 14, 2026
Volexity Uncovers Stealthy Ivanti VPN Attack Using Three Zero-Day Vulnerabilities

Ivanti VPN zero-days let attackers gain root access, steal credentials, evade detection, and prepare for wider network compromise. On October 5, Volexity started investigating suspicious activity at one of its monitoring customers and traced everything back to an Ivanti Connect Secure VPN appliance running version 22.8R2.4, the latest build available at the time. Three chained […]

Pierluigi Paganini October 13, 2026
U.S. CISA adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Ivanti Connect Secure FortiMail flaw, tracked as CVE-2026-104935 (CVSS score of 8.6), to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability is an authentication bypass issue caused by […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

VOLTA, the infostealer that asks an AI which victims are worth the effort

Malware / November 02, 2026

New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia

Security / November 02, 2026

Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens

Security / November 02, 2026

Chainalysis Investigates Security Incident Involving AI-Driven Attack Techniques

Artificial Intelligence / November 02, 2026

FBI Blames North Korea for $6 Billion Binance Crypto Theft

APT / November 01, 2026