News & Sicurezza

Poland’s energy control systems were breached through exposed VPN access On 29 December 2025, coordinated cyberattacks unfolded across Poland’s critical infrastructure, targeting energy and industrial organizations. The attackers struck numerous wind and solar farms, a pri ... Read more Published Date: Feb 06, 2026 (2 days, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-24423 CVE-2025-59718

The Good, the Bad and the Ugly in Cybersecurity – Week 6 The Good | Former Google Engineer Steals AI Supercomputing Secrets for China Former Google software engineer Linwei Ding has been found guilty of economic espionage and trade secret theft after steali ... Read more Published Date: Feb 06, 2026 (2 days, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-25253

17% of 3rd-Party Add-Ons for OpenClaw Used in Crypto Theft and macOS Malware Bitdefender Labs reveals that 17% of OpenClaw AI skills analyzed in February 2026 are malicious. With over 160,000 stars on GitHub, OpenClaw is being exploited to steal crypto keys and install macOS m ... Read more Published Date: Feb 06, 2026 (2 days, 19 hours ago) Vulnerabilities has been mentioned in this article. CVE-2025-55182

A vulnerability was detected in IP-COM W30AP up to 1.0.0.11(1340). Affected by this issue is the function R7WebsSecurityHandler of the file /goform/wx3auth of the component POST Request Handler. The manipulation of the argument data results in stack-based buffer overflow. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Ransomware attackers are exploiting critical SmarterMail vulnerability (CVE-2026-24423) For the third time in two weeks, CISA added a vulnerability (CVE-2026-24423) affecting SmarterTools’ SmarterMail email and collaboration server to its Known Exploited Vulnerabilities catalog, and this ... Read more Published Date: Feb 06, 2026 (2 days, 20 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-24423 CVE-2026-23760 CVE-2025-52691 CVE-2025-22225

The WP Duplicate plugin for WordPress is vulnerable to Missing Authorization leading to Arbitrary File Upload in all versions up to and including 1.1.8. This is due to a missing capability check on the `process_add_site()` AJAX action combined with path traversal in the file upload functionality. This makes it possible for authenticated (subscriber-level) attackers to set the internal `prod_key_random_id` option, which can then be used by an unauthenticated attacker to bypass authentication checks and write arbitrary files to the server via the `handle_upload_single_big_file()` function, ultimately leading to remote code execution.

CVE-2025-13375: Critical IBM Crypto Flaw (CVSS 9.8) Exposes HSMs IBM has issued a critical security bulletin for its Common Cryptographic Architecture (CCA), a core component used to interface with the company’s high-security hardware modules. The vulnerability, tr ... Read more Published Date: Feb 06, 2026 (2 days, 21 hours ago) Vulnerabilities has been mentioned in this article. CVE-2025-13375 CVE-2026-24858 CVE-2026-21509 CVE-2026-20045 CVE-2024-41787 CVE-2024-49803

Fortinet waarschuwt voor SQL Injection beveiligingslek in FortiClientEMS Fortinet waarschuwt klanten voor een kritiek beveiligingslek in FortiClientEMS waardoor SQL Injection mogelijk is. Twee jaar geleden werd een andere SQL Injection kwetsbaarheid actief misbruikt bij aa ... Read more Published Date: Feb 06, 2026 (2 days, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-21643 CVE-2023-48788

SmarterMail-servers aangevallen via kritieke RCE-kwetsbaarheid Aanvallers maken actief misbruik van een kritieke kwetsbaarheid in SmarterMail waardoor kwetsbare servers op afstand zijn over te nemen, zo waarschuwt het Amerikaanse cyberagentschap CISA. Drie weken ... Read more Published Date: Feb 06, 2026 (2 days, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-24423 CVE-2026-23760

February 2026 Patch Tuesday forecast: Lots of OOB love this month Valentine’s Day is just around the corner and Microsoft has been giving us a lot of love with a non-stop supply of patches starting with January 2026 Patch Tuesday. The January releases addressed 92 v ... Read more Published Date: Feb 06, 2026 (2 days, 17 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-21509 CVE-2025-12743 CVE-2025-8088 CVE-2025-22225

F5 Patches Critical Vulnerabilities in BIG-IP, NGINX, and Related Products F5 Patches Critical Vulnerabilities F5 released its February 2026 Quarterly Security Notification on February 4, announcing several medium and low-severity CVEs, plus a security exposure affecting BIG ... Read more Published Date: Feb 06, 2026 (2 days, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2026-22549 CVE-2026-22548 CVE-2026-20732 CVE-2026-20730 CVE-2026-1642

CISA Warns of React Native Community Command Injection Vulnerability Exploited in Attacks React Native Command Injection Flaw The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2025-11953 to its Known Exploited Vulnerabilities (KEV) catalog, flagging an OS comma ... Read more Published Date: Feb 06, 2026 (2 days, 18 hours ago) Vulnerabilities has been mentioned in this article. CVE-2025-11953