MUST READ

Malware Hijacks Android Car Head Units

 | 

U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog

 | 

Your Shredded Visa Card May Still Work at the Checkout

 | 

Six Maximum-Severity Flaws Found in Cisco Products

 | 

GitLab Warns of Active Exploitation of Critical GraphQL Flaw

 | 

Poland's CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw

 | 

U.S. CISA adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog

 | 

Cl0p Targets 40+ Organizations Through PTC Windchill Flaw

 | 

Manic: The Android Malware That Exfiltrates Data Even When the Phone Is Offline

 | 

U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog

 | 

US Indicts 17 Iranians Over Years-Long Cyber Espionage Campaign

 | 

StopAndProtect Turns 2,000 Hacked WordPress Sites Into a Criminal Network

 | 

Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras

 | 

Microsoft Tracks MacSync Stealer by Its Behavior, Not Its Domains

 | 

50,000 Stripe Secrets Leaked in Public Code

 | 

U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog

 | 

Hackers Expose Data of 1.2 Million Heights Finance Customers

 | 

Project noRecognition: Teaching AI to Fool Surveillance Cameras

 | 

U.S. CISA adds a Ray-Project Ray flaw to its Known Exploited Vulnerabilities catalog

 | 

New Mirai-Based Evooo1Bot Botnet Targets Linux Devices

 | 

ToxicPanda 2.0

Pierluigi Paganini August 22, 2026
ToxicPanda 2.0 Gets a Major Upgrade, Expanding Attacks Across 16 Countries

ToxicPanda 2.0 targets 349 financial apps and abuses Android Wireless Debugging to gain deeper device access and steal banking credentials. ToxicPanda used to be a Europe-focused nuisance targeting a manageable list of banks. That version is gone. Zimperium’s zLabs team just documented ToxicPanda 2.0, and the numbers alone tell the story: 349 targeted financial institutions […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

Malware Hijacks Android Car Head Units

Hacking / August 22, 2026

U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog

Security / August 22, 2026

Your Shredded Visa Card May Still Work at the Checkout

Hacking / August 21, 2026

Six Maximum-Severity Flaws Found in Cisco Products

Security / August 21, 2026

GitLab Warns of Active Exploitation of Critical GraphQL Flaw

Uncategorized / August 21, 2026