Australia Alerts Organizations to Ongoing CMS Exploitation Attacks Pierluigi Paganini July 13, 2026 Australia warns of a global campaign exploiting CMS flaws to deploy webshells on WordPress, Joomla, and other…
Security Affairs newsletter Round 585 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini July 12, 2026 A new round of the weekly Security Affairs newsletter has arrived! Every week, the…
U.S. CISA adds iCagenda and Balbooa Forms flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini July 11, 2026 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds iCagenda and Balbooa…
Update Now: Critical Zimbra Classic Web Client Flaw Could Expose Mailboxes Pierluigi Paganini July 10, 2026 Zimbra addressed a critical stored XSS vulnerability in its Classic Web Client that lets…
Ransomware Never Stopped: Over 9,000 Confirmed Attacks Since 2018 Pierluigi Paganini July 10, 2026 Ransomware remains above 1,400 attacks yearly since 2023. Qilin leads in 2026, while the U.S. remains…
INTERPOL Operation First Light Nets 5,811 Arrests and Seizes $293 Million Pierluigi Paganini July 09, 2026 INTERPOL’s Operation First Light 2026 led to 5,811 arrests, blocked $293M in criminal assets,…
Fake VPN and 7-Zip Apps Turn Victims Into Residential Proxy Nodes Pierluigi Paganini July 09, 2026 Fake apps like WireVPN and a trojanized 7-Zip turn victims’ devices into residential proxies,…
Telegram-Hosted RedWing Malware Lets Anyone Rent Android Spyware Tools Pierluigi Paganini July 08, 2026 RedWing: The Android Banking Trojan You Can Rent on Telegram for Less Than a Coffee Subscription…
Hidden Tenda Router Backdoor Grants Admin Access, No Patch Available Pierluigi Paganini July 07, 2026 CERT/CC warns an unpatched backdoor in several Tenda routers lets attackers bypass login and gain…
Adobe ColdFusion flaw CVE-2026-48282 now exploited in the wild Pierluigi Paganini July 06, 2026 Attackers are exploiting the critical Adobe ColdFusion flaw CVE-2026-48282, which allows remote code execution on unpatched…