;
;

Security Affairs

Read, think, share … Security is everyone's responsibility

Website

U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws t...
Posted on 15 October 2026 | 7:21 pm

Silent Lynx: Kazakhstan-Linked Hackers Target Russian Refinery and Government

Silent Lynx, a group likely based in Kazakhstan, targets Russian energy and government entities in espionage campaigns across Central Asia. Researc...
Posted on 15 October 2026 | 6:33 pm

AdFection: Beyond the Click: Citizen Lab Exposes Ad-Delivered Spyware Networks

Spyware vendors use online ad infrastructure to profile targets and deliver exploits without requiring users to click anything. The investigation l...
Posted on 15 October 2026 | 2:21 pm

Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise

Attackers exploit a critical Cisco email gateway flaw to gain root access. Cisco urges customers to update scanner tools and check for compromise. ...
Posted on 15 October 2026 | 9:27 am

Hirudo Android Trojan Replaces Banking Apps to Steal Credentials

Android trojan Hirudo replaces genuine banking apps with modified versions to steal credentials and bypass security checks, enabling financial frau...
Posted on 15 October 2026 | 6:06 am

U.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog. The ...
Posted on 14 October 2026 | 9:15 pm

Microsoft Patch Tuesday Sets New Record with 1,415 CVEs in October 2026 Updates

Microsoft Patch Tuesday security updates for October 2026 address a record 1,415 vulnerabilities. Prioritize the exploited zero-day, critical bugs ...
Posted on 14 October 2026 | 2:01 pm

Hidden Audio Recorder Found at OpenAI as Employee Faces Federal Charges

OpenAI employee charged with planting hidden audio recorders to capture sensitive discussions about AI research and company strategy. On September ...
Posted on 14 October 2026 | 11:37 am

Volexity Uncovers Stealthy Ivanti VPN Attack Using Three Zero-Day Vulnerabilities

Ivanti VPN zero-days let attackers gain root access, steal credentials, evade detection, and prepare for wider network compromise. On October 5, Vo...
Posted on 14 October 2026 | 10:15 am

How a leaked builder of XWorm turned a remote access trojan into a surveillance kit

Netskope tracks four XWorm versions in the wild, 46 plugins, and new tools for location, audio and live browser control, with detections up fourfol...
Posted on 14 October 2026 | 5:46 am