MUST READ

Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack

 | 

Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions

 | 

Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers

 | 

NIS2 Makes Board Members Personally Liable for Access Control Decisions

 | 

Apple’s spyware notifications reach the Bundestag: what the BSI says to do now

 | 

VOLTA, the infostealer that asks an AI which victims are worth the effort

 | 

New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia

 | 

Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens

 | 

Chainalysis Investigates Security Incident Involving AI-Driven Attack Techniques

 | 

FBI Blames North Korea for $6 Billion Binance Crypto Theft

 | 

SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 6

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 121

 | 

Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

SMS of Death: Android under attack, an invisible SMS can block calls and emergency services

 | 

U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog

 | 

Attackers Exploit Critical Drupal Commerce Core Vulnerability CVE-2026-118539

 | 

Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries

 | 

U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog

 | 

$6.3 Billion Stolen from Binance in Attack Attributed to North Korea

 | 

How to prioritize remediation after a pentest: a practitioner workflow

 | 

CVE-2026-97229

Pierluigi Paganini October 30, 2026
U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added GitLab and Cisco vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Below are the flaws added to the catalog: CVE-2026-97229 is a critical security flaw that could let attackers run code on […]

Pierluigi Paganini October 13, 2026
GitLab Patches Max-Severity Vulnerability CVE-2026-97229

GitLab fixed a critical vulnerability with a maximum CVSS score of 10.0 that could let unauthenticated attackers run code on its servers. GitLab has addressed a critical security flaw, tracked as CVE-2026-97229 (CVSS score of 10.0), that could let attackers run code on its servers without logging in. The flaw affects Community Edition (CE) and […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack

Cyber Crime / November 03, 2026

Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions

Security / November 03, 2026

Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers

Malware / November 03, 2026

NIS2 Makes Board Members Personally Liable for Access Control Decisions

Laws and regulations / November 03, 2026

Apple’s spyware notifications reach the Bundestag: what the BSI says to do now

Intelligence / November 03, 2026