Over 1 million malicious emails found using text salting to fool AI scanners

CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers Pierluigi Paganini July 20, 2026 F5 fixes critical nginx flaw CVE-2026-42533 that can crash servers and, in some cases, allow remote code execution through crafted HTTP requests. F5 released patches for a critical nginx vulnerability, tracked as CVE-2026-42533 (CVSS score of 9.2), that can…

Medical records, diagnoses, biometric data… Over a lifetime, we generate a vast amount of healthcare information about ourselves—data that, by its very nature, remains linked to us permanently. It is precisely this permanence that has increased its value on illegal marketplaces used by ransomware groups, access brokers and networks specialising in digital fraud. The growing…

The browser has become the enterprise workspace. Employees, contractors, partners, and third parties use browsers to access SaaS applications, internal web apps, admin consoles, collaboration tools, and AI services from anywhere, often across a mix of managed, unmanaged, and personally owned devices.  As they do, adversaries are increasingly targeting the browser session itself. They…

Recent leaks of internal messages from the Conti ransomware gang provide a unique insight into the operations of one of the world’s most notorious cybercrime groups. The messages, leaked by a Ukrainian member, reveal the gang’s organizational structure and internal dynamics. The timing of the leak coincides with the gang’s declaration of support for Russia…

Security Affairs newsletter Round 586 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini July 19, 2026 A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press….

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday ordered government agencies to prioritize patching two actively exploited vulnerabilities in the Fortinet FortiSandbox threat detection platform. These two critical-severity security flaws (tracked as CVE-2026-39808 and CVE-2026-25089) were addressed by Fortinet on April 14 and June 9, respectively. As the company detailed in security advisories issued…