SonicWall warns of actively exploited flaw in SMA 100 AMC
SonicWall warns of actively exploited flaw in SMA 100 AMC Pierluigi Paganini December 17, 2025 SonicWall warned users to patch...
actively
When Zero-Days Go Active: What Ongoing Windows, Chrome, and Apple Exploits Reveal About Modern Intrusion Risk
A series of actively exploited zero-day vulnerabilities affecting Windows, Google Chrome, and Apple platforms was disclosed in mid-December, according...
Microsoft Patch Tuesday security updates for December 2025 fixed an actively exploited zero-day
Microsoft Patch Tuesday security updates for December 2025 fixed an actively exploited zero-day Pierluigi Paganini December 10, 2025 Microsoft Patch...
Sneeit WordPress RCE Exploited in the Wild While ICTBroadcast Bug Fuels Frost Botnet Attacks
A critical security flaw in the Sneeit Framework plugin for WordPress is being actively exploited in the wild, per data...
Google’s latest Android security update fixes two actively exploited flaws
Google’s latest Android security update fixes two actively exploited flaws Pierluigi Paganini December 02, 2025 Google’s latest Android security update...
Fraudulent email domain tracker: November 2025
Every month, we publish a snapshot of the email domains most actively used in fake account creation and related...
Tsundere Botnet Expands Using Game Lures and Ethereum-Based C2 on Windows
Nov 20, 2025Ravie LakshmananBotnet / Malware Cybersecurity researchers have warned of an actively expanding botnet dubbed Tsundere that's targeting Windows...
7-Zip RCE flaw (CVE-2025-11001) actively exploited in attacks in the wild
7-Zip RCE flaw (CVE-2025-11001) actively exploited in attacks in the wild Pierluigi Paganini November 19, 2025 A remote code execution...
Microsoft Patch Tuesday security updates for November 2025 fixed an actively exploited Windows Kernel bug
Microsoft Patch Tuesday security updates for November 2025 fixed an actively exploited Windows Kernel bug Pierluigi Paganini November 12, 2025...
Security Training Just Became Your Biggest Security Risk
Your security training is actively making your organization less secure. This isn’t vendor hyperbole—it’s the uncomfortable reality facing every CISO...
Active Exploits Hit Dassault and XWiki — CISA Confirms Critical Flaws Under Attack
Oct 29, 2025Ravie LakshmananVulnerability / Malware Threat actors are actively exploiting multiple security flaws impacting Dassault Systèmes DELMIA Apriso and...
Critical Exploit Lets Hackers Bypass Authentication in WordPress Service Finder Theme
Oct 09, 2025Ravie LakshmananVulnerability / Website Security Threat actors are actively exploiting a critical security flaw impacting the Service Finder...
Broadcom patches VMware Zero-Day actively exploited by UNC5174
Broadcom patches VMware Zero-Day actively exploited by UNC5174 Pierluigi Paganini September 30, 2025 Broadcom patched six VMware flaws, including CVE-2025-41244,...
Cisco fixed actively exploited zero-day in Cisco IOS and IOS XE software
Cisco fixed actively exploited zero-day in Cisco IOS and IOS XE software Pierluigi Paganini September 25, 2025 Cisco addressed a...
CVE-2025-10585 is the sixth actively exploited Chrome zero-day patched by Google in 2025
CVE-2025-10585 is the sixth actively exploited Chrome zero-day patched by Google in 2025 Pierluigi Paganini September 18, 2025 Google addressed...
