MUST READ

U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog

 | 

US Indicts 17 Iranians Over Years-Long Cyber Espionage Campaign

 | 

StopAndProtect Turns 2,000 Hacked WordPress Sites Into a Criminal Network

 | 

Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras

 | 

Microsoft Tracks MacSync Stealer by Its Behavior, Not Its Domains

 | 

50,000 Stripe Secrets Leaked in Public Code

 | 

U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog

 | 

Hackers Expose Data of 1.2 Million Heights Finance Customers

 | 

Project noRecognition: Teaching AI to Fool Surveillance Cameras

 | 

U.S. CISA adds a Ray-Project Ray flaw to its Known Exploited Vulnerabilities catalog

 | 

New Mirai-Based Evooo1Bot Botnet Targets Linux Devices

 | 

SafePal Says 39,798 Customers Hit by Data Breach

 | 

LiteLLM Supply-Chain Attack - Technology, Banking and Healthcare the Most Affected

 | 

Invisible AI Prompts Trigger Court Sanctions

 | 

McDonald’s Employee Data Appears in Leak, Seller Claims 1.7M Records Stolen

 | 

Akira Ransomware Uses Safe Mode to Bypass EDR

 | 

DDoS Attacks Cause Major Threema Outages

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 110

 | 

Mustang Panda Upgrades CoolClient With a Kernel Rootkit

 | 

Sophisticated Cyberattack Exposes Data of 678,000 French Taxpayers

 | 

StopAndProtect

Pierluigi Paganini August 20, 2026
StopAndProtect Turns 2,000 Hacked WordPress Sites Into a Criminal Network

StopAndProtect turned nearly 2,000 hacked WordPress sites into a criminal network for malware delivery, data theft, surveillance and ransomware. Check Point Research uncovered a cybercrime operation, dubbed StopAndProtect, that has turned thousands of hacked WordPress websites into a shared platform for malware delivery, data theft, surveillance and ransomware. The operation is a good reminder that […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog

Hacking / August 20, 2026

US Indicts 17 Iranians Over Years-Long Cyber Espionage Campaign

Intelligence / August 20, 2026

StopAndProtect Turns 2,000 Hacked WordPress Sites Into a Criminal Network

Hacking / August 20, 2026

Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras

Internet of Things / August 19, 2026

Microsoft Tracks MacSync Stealer by Its Behavior, Not Its Domains

Malware / August 19, 2026