Security Affairs

securityaffairs.coadded August 2026

Manic: The Android Malware That Exfiltrates Data Even When the Phone Is Offline

Security Affairsby Pierluigi Paganini9h ago

ThreatFabric’s Mobile Threat Intelligence team has identified a new Android malware, dubbed Manic, which has been active in the wild since at least February 2026.

55%

NSA, CISA, FBI, DOE, and EPA Warn of Active AI-Assisted Attacks on Siemens S7 PLCs

Security Affairsby Pierluigi Paganini9h ago

Five U.S. federal agencies issued a joint advisory this week warning of an active hacking campaign against Siemens S7 Series programmable logic controllers.

54%

U.S. CISA adds a MLflow flaw to its Known Exploited Vulnerabilities catalog

Security Affairsby Pierluigi Paganini18h ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Progress LoadMaster vulnerability, tracked as CVE-2026-64849 (CVSS score of 9.3), to its Known Exploited Vulnerabilities...

US Indicts 17 Iranians Over Years-Long Cyber Espionage Campaign

Security Affairsby Pierluigi Paganini18h ago

Eight years after the original indictment first went public, US prosecutors just added eight more names to the list.

54%

StopAndProtect Turns 2,000 Hacked WordPress Sites Into a Criminal Network

Security Affairsby Pierluigi Paganini19h ago

Check Point Research uncovered a cybercrime operation, dubbed StopAndProtect, that has turned thousands of hacked WordPress websites into a shared platform for malware delivery, data theft...

55%

Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras

Security Affairsby Pierluigi Paganini1d ago

A researcher discovered an exposed directory containing the tools of an attacker who compromised more than 14,000 Dahua cameras between June 17 and July 22, 2026, mainly in Ukraine and Russia.

56%

Microsoft Tracks MacSync Stealer by Its Behavior, Not Its Domains

Security Affairsby Pierluigi Paganini1d ago

Domain blocking is a losing game when the thing you’re blocking can register a new domain faster than you can add it to a list.

52%

50,000 Stripe Secrets Leaked in Public Code

Security Affairsby Pierluigi Paganini1d ago

Ransomnews researchers have documented a large-scale leak of Stripe merchant API keys found exposed in public code repositories, GitHub Actions logs, and misconfigured web servers, with over 50,000...

55%

U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog

Security Affairsby Pierluigi Paganini1d ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-33824 is a Windows Internet Key...

51%

Hackers Expose Data of 1.2 Million Heights Finance Customers

Security Affairsby Pierluigi Paganini2d ago

Heights Finance is a U.S. consumer finance company that provides personal loans and related lending services, mainly to customers who may have limited access to traditional bank credit.

47%