MUST READ

One Exploit Chain, Two Espionage Campaigns: Chrome and Windows Under Fire

 | 

Telegram Desktop Flaw Could Turn Old Chat Exports Into Data Theft Traps

 | 

Non-Zero-Day VPN Flaw Left Japan 's Government Shared Network Platform Exposed: 246,000 Records at Risk

 | 

ENISA: Frontier AI Is Changing the Speed of Cyberattacks. Europe Needs to Catch Up

 | 

China Calls Amodei’s AI Proposal a New Cold War Playbook

 | 

U.S. CISA adds GitLab, JFrog Artifactory, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog

 | 

Dutch NCSC Warns: Critical Check Point VPN Flaws Put Networks at Risk

 | 

Anthropic CEO Calls for an AI Slowdown. Is It Possible?

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 114

 | 

Security Affairs newsletter Round 594 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

GitLab CVE-2026-85706: One HTTP Request, No Authentication, Full File Read - Exploited Within 24 Hours

 | 

Conti Hacker Who Built Malware and Attacked Victims Gets Four-Year Sentence

 | 

Anthropic: AI Misuse Is Entering a New Phase: From Cybercrime to Surveillance, Propaganda and Weapons

 | 

The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet

 | 

Attackers Exploit Critical Cisco FMC Flaw to deploy Qilin ransomware

 | 

UK Council Attack Linked to Mass Exploitation of SonicWall Flaw

 | 

U.S. CISA adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog

 | 

More Capable AI, Not Enough Guardrails

 | 

A New Claude 's Sandbox Failure Shows How AI Can Rationalize Real-World Harm

 | 

U.S. CISA adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalog

 | 

UTA0560

Pierluigi Paganini September 15, 2026
One Exploit Chain, Two Espionage Campaigns: Chrome and Windows Under Fire

Two China-linked groups ran identical Chrome/Windows zero-day exploits against NGOs, before Chrome’s patch shipped, deploying different backdoors each. Two China-linked threat actors used the same Chrome/Windows zero-day against NGOs starting September 1, 2026, Volexity’s new report lays out the whole chain in detail. On September 1, Volexity detected a spear-phishing campaign by UTA0560 targeting several […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

One Exploit Chain, Two Espionage Campaigns: Chrome and Windows Under Fire

APT / September 15, 2026

Telegram Desktop Flaw Could Turn Old Chat Exports Into Data Theft Traps

Security / September 15, 2026

Non-Zero-Day VPN Flaw Left Japan 's Government Shared Network Platform Exposed: 246,000 Records at Risk

Security / September 15, 2026

ENISA: Frontier AI Is Changing the Speed of Cyberattacks. Europe Needs to Catch Up

Artificial Intelligence / September 14, 2026

China Calls Amodei’s AI Proposal a New Cold War Playbook

Uncategorized / September 14, 2026