A public iOS sandbox escape could expose wallet keys, Binance warns. No attacks are reported and no fix is confirmed. On 10 November, Binance warned users…
Tag: Security Affairs
Google fixes the eighth actively exploited Chrome zero-day of 2026
Google patched nine Chrome flaws, including a V8 vulnerability tracked as CVE-2026-125350, that attackers have been actively exploiting in the wild.…
Iris Ohyama data breach may expose personal information of 7.7 million people
Iris Ohyama warns that a cloud data breach may have exposed personal information of 7.7 million customers, including names and passwords. Japanese…
France Blames Iran for the Supermarket Fridge Attacks
France blames Iran for supermarket fridge attacks. What’s known, what remains unclear, and how to secure exposed controllers. French Foreign Minister…
QNAP Warns Users as Plex2Shell Flaws Are Used to Hack NAS Devices
Taiwanese vendor QNAP urges users to update Plex Media Server after reports of NAS compromises through the Plex2Shell vulnerability chain. QNAP urges…
CISA and the FBI Warn Of Attacks against Industrial Refrigeration Controllers
US agencies warn attackers are going after industrial refrigeration controllers. The fixes are basic, and most start with getting them off the internet.…
Fake GitHub Security Tools Infect Over 2,000 PCs With Malware
Fake GitHub security tools are spreading malware that disables defenses, steals sensitive data and infects over 2,000 PCs. Cybersecurity firm Doctor Web…
The BBC has a plan for a Black Sky event, and it runs on FM radio
The BBC plans to use emergency FM radio to keep the UK informed during prolonged blackouts, with a self-sufficient studio ready for 72 hours. If…
Don’t Hand Propaganda a Gift: Reading the Brenner Base Tunnel SE Breach Calmly
Brenner Base Tunnel SE confirms a breach and Everest claims 812 GB. What we know, what we don’t, and why overblown alarm helps propaganda more than the…
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 7
Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial…
Security Affairs newsletter Round 603 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email…
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 122
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter…
Attackers Exploit Third-Party Provider to Raid French Bank Crédit Mutuel Arkéa
French Bank Crédit Mutuel Arkéa says hackers exploited a service provider to steal up to $133 million using the bank’s own account. French cooperative…
Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches
Hunt.io traced ARTEX servers and AI-powered hacking tools used in breaches affecting seven South Korean financial institutions. Between late September and…
One Product Isn’t the Problem: Monetizing an AI Portfolio Without Confusing Your Customers
Software vendors can boost revenue by tracking customer usage across products, while AI accelerates pricing and consumption decisions. It is hard to find…
UNM Health Shuts Clinics and Diverts Patients During Security Incident
A cybersecurity incident forced UNM Health to divert ambulances, cancel appointments, and pause care while it contained the threat. On Monday, October 26,…
U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds SonicWall SonicOS SSLVPN vulnerability CVE-2026-19868 to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and…
White House Network Appears in Global Residential Proxy Traffic
Layer3 found residential proxy traffic using the White House network, raising concerns about potential exposure of internal systems. Layer3 Intel says it…
Russian APT29 Targets Mobile Users with Watering Hole Attacks
Russia-linked group APT29 targeted iOS and Android users through hijacked websites and a compromised analytics service. Sekoia says a large-scale watering…
U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and…