MUST READ

JetBrains Patches Critical TeamCity Flaw Allowing Server Takeover

 | 

New Crypter-as-a-Service Cruciferra Fuels Stealthy Malware Attacks Worldwide

 | 

U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog

 | 

Reuters: OpenAI Agent Hacked Hugging Face for Days Before Being Detected

 | 

MedusaHVNC Trojan Creates Hidden Desktops to Hijack Browsers and Steal Data

 | 

DentaQuest disclosed a data breach that impacted +23 million individuals

 | 

GitLab Users Urged to Patch After Research Reveals Critical RCE Chain

 | 

EFF: Most Smart Wearables Still Fall Short on Privacy and Transparency

 | 

LockBit5 and Qilin Lead Ransomware Attacks Against Italian Organizations

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 107

 | 

Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Credentials

 | 

Security Affairs newsletter Round 587 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

Iran-Linked Actors Breach Are Targeting US Water and Energy Control Systems

 | 

Australian energy provider Origin Energy disclosed a data breach impacting customer data

 | 

Google Fined €890M Under EU Digital Markets Act Over Search and Play Store Practices

 | 

Thailand's Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged

 | 

UAC-0099 Is Now Hiding Malware Inside a Fake Notepad++ Plugin to Target Ukrainian Organizations

 | 

The AI Trust Paradox: Businesses Are Racing Ahead, but Consumers Are Hesitating

 | 

US Agencies Warn of Laundry Bear Campaign Targeting Unpatched Zimbra Servers

 | 

U.S. CISA adds Microsoft SharePoint and Check Point SmartConsole flaws to its Known Exploited Vulnerabilities catalog

 | 

Langflow

Pierluigi Paganini July 22, 2026
U.S. CISA adds DD-WRT, Langflow and WordPress flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds DD-WRT, Langflow, and WordPress flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added DD-WRT, Langflow, and WordPress flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the flaws added to the KeV catalog: The first issue added to the catalog […]

Pierluigi Paganini July 08, 2026
U.S. CISA adds Adobe ColdFusion, Joomlack Page Builder, Langflow, and JoomShaper SP Page Builder flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Adobe ColdFusion, Joomlack Page Builder, Langflow, and JoomShaper SP Page Builder flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added [1, 2] Adobe ColdFusion, Joomlack Page Builder, Langflow, and JoomShaper SP Page Builder flaws to its Known Exploited Vulnerabilities (KEV) catalog. […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

JetBrains Patches Critical TeamCity Flaw Allowing Server Takeover

Security / July 28, 2026

New Crypter-as-a-Service Cruciferra Fuels Stealthy Malware Attacks Worldwide

Malware / July 28, 2026

U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog

Security / July 28, 2026

Reuters: OpenAI Agent Hacked Hugging Face for Days Before Being Detected

Artificial Intelligence / July 27, 2026

MedusaHVNC Trojan Creates Hidden Desktops to Hijack Browsers and Steal Data

Malware / July 27, 2026