Russian APT targets Ukraine via Zimbra XSS flaw CVE-2025-66376
Russian APT targets Ukraine via Zimbra XSS flaw CVE-2025-66376 Pierluigi Paganini March 19, 2026 Russian APT exploits a critical XSS...
flaw
Interlock group exploiting the CISCO FMC flaw CVE-2026-20131 36 days before disclosure
Interlock group exploiting the CISCO FMC flaw CVE-2026-20131 36 days before disclosure Pierluigi Paganini March 19, 2026 The Interlock ransomware...
Researchers warn of unpatched, critical Telnetd flaw affecting all versions
Researchers warn of unpatched, critical Telnetd flaw affecting all versions Pierluigi Paganini March 18, 2026 CVE-2026-32746 is a critical flaw...
U.S. CISA adds a flaw in Wing FTP Server to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a flaw in Wing FTP Server to its Known Exploited Vulnerabilities catalog Pierluigi Paganini March 16, 2026...
U.S. CISA adds a flaw in n8n to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a flaw in n8n to its Known Exploited Vulnerabilities catalog Pierluigi Paganini March 12, 2026 The U.S....
Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit
Ravie LakshmananMar 12, 2026Vulnerability / Malware Apple on Wednesday backported fixes for a security flaw in iOS, iPadOS, and macOS...
Critical Nginx UI flaw CVE-2026-27944 exposes server backups
Critical Nginx UI flaw CVE-2026-27944 exposes server backups Pierluigi Paganini March 08, 2026 Nginx UI flaw CVE-2026-27944 lets attackers download...
Perplexity AI Browser Flaw Could Let Calendar Invites Access Local Files
Image: Perplexity A security flaw in Perplexity’s AI-powered Comet browser could have allowed attackers to access files on a user’s...
Android devices hit by exploited Qualcomm flaw CVE-2026-21385
Android devices hit by exploited Qualcomm flaw CVE-2026-21385 Pierluigi Paganini March 03, 2026 Google confirms that the Qualcomm Android vulnerability...
Chrome security flaw enabled spying via Gemini Live assistant
Chrome security flaw enabled spying via Gemini Live assistant Pierluigi Paganini March 03, 2026 A Google Chrome vulnerability lets malicious...
ClawJacked flaw exposed OpenClaw users to data theft
ClawJacked flaw exposed OpenClaw users to data theft Pierluigi Paganini March 02, 2026 “ClawJacked” flaw let malicious sites hijack OpenClaw...
APT28 Tied to CVE-2026-21513 MSHTML 0-Day Exploited Before Feb 2026 Patch Tuesday
Ravie LakshmananMar 02, 2026Vulnerability / Threat Intelligence A recently disclosed security flaw patched by Microsoft may have been exploited by...
5 Nations Alert: Critical Cisco Bug Used in Global Espionage Campaign
Image: Generated via Google’s Nano Banana For three years, a critical flaw sat inside Cisco’s Catalyst SD-WAN products unnoticed. Hackers...
Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access
Ravie LakshmananFeb 26, 2026Vulnerability / Network Security A newly disclosed maximum-severity security flaw in Cisco Catalyst SD-WAN Controller (formerly vSmart)...
Critical Zyxel router flaw exposed devices to remote attacks
Critical Zyxel router flaw exposed devices to remote attacks Pierluigi Paganini February 25, 2026 Zyxel fixed a critical flaw in...
