LufSec
  • Home
  • All products
  • About
  • Contact Us
Sign in Subscribe

Luciano Ferrari

Luciano Ferrari
Critical GNU InetUtils telnetd Flaw Allows Remote Root Access via CVE-2026-24061

News

Critical GNU InetUtils telnetd Flaw Allows Remote Root Access via CVE-2026-24061

Friday, January 23, 2026 Top 5 Cybersecurity Stories You Should Know 1. Critical GNU InetUtils telnetd Flaw Allows Remote Root Access via CVE-2026-24061 — tl;dr: A critical vulnerability in GNU InetUtils telnet daemon (telnetd), tracked as CVE-2026-24061, allows remote authentication bypass, enabling attackers to gain root access to affected systems.

By Luciano Ferrari 23 Jan 2026
Cisco Patches Critical Zero-Day CVE-2026-20045 in Unified CM and Webex

News

Cisco Patches Critical Zero-Day CVE-2026-20045 in Unified CM and Webex

Thursday, January 22, 2026 Top 5 Cybersecurity Stories You Should Know 1. Cisco Patches Critical Zero-Day CVE-2026-20045 in Unified CM and Webex — tl;dr: Cisco has released urgent patches for a critical zero-day vulnerability, CVE-2026-20045, affecting its Unified Communications products and Webex Calling Dedicated Instance. The flaw, with a CVSS

By Luciano Ferrari 22 Jan 2026
#StopRansomware: Interlock Advisory Released by CISA and FBI

News

#StopRansomware: Interlock Advisory Released by CISA and FBI

Wednesday, January 21, 2026 Top 5 Cybersecurity Stories You Should Know 1. #StopRansomware: Interlock Advisory Released by CISA and FBI — tl;dr: The CISA and FBI have issued a joint advisory on Interlock ransomware, first detected in September 2024, targeting businesses and critical infrastructure in North America and Europe. This

By Luciano Ferrari 21 Jan 2026
Evelyn Stealer Malware Targets Developers via VS Code Extensions

News

Evelyn Stealer Malware Targets Developers via VS Code Extensions

Tuesday, January 20, 2026 Top 5 Cybersecurity Stories You Should Know 1. Evelyn Stealer Malware Targets Developers via VS Code Extensions — tl;dr: A new malware campaign named Evelyn Stealer is targeting software developers by exploiting vulnerabilities in Microsoft Visual Studio Code (VS Code) extensions. This malware is designed to

By Luciano Ferrari 20 Jan 2026
CIRO Confirms Data Breach Affecting 750,000 Canadian Investors

News

CIRO Confirms Data Breach Affecting 750,000 Canadian Investors

Monday, January 19, 2026 Top 5 Cybersecurity Stories You Should Know 1. CIRO Confirms Data Breach Affecting 750,000 Canadian Investors — tl;dr: The Canadian Investment Regulatory Organization (CIRO) has confirmed a data breach that has impacted approximately 750,000 Canadian investors. The breach, which occurred last year, raises concerns

By Luciano Ferrari 19 Jan 2026
Clop Exploits Oracle EBS CVE-2025-61882: A New Era of Data Extortion

News

Clop Exploits Oracle EBS CVE-2025-61882: A New Era of Data Extortion

Friday, January 16, 2026 Top 5 Cybersecurity Stories You Should Know 1. Clop Exploits Oracle EBS CVE-2025-61882: A New Era of Data Extortion — tl;dr: The Clop ransomware gang has exploited a critical vulnerability (CVE-2025-61882) in Oracle E-Business Suite, allowing unauthenticated remote code execution. Since August 2025, they have targeted

By Luciano Ferrari 16 Jan 2026
Clop Exploits Oracle EBS Vulnerability CVE-2025-61882 for Data Extortion

News

Clop Exploits Oracle EBS Vulnerability CVE-2025-61882 for Data Extortion

Thursday, January 15, 2026 Top 5 Cybersecurity Stories You Should Know 1. Clop Exploits Oracle EBS Vulnerability CVE-2025-61882 for Data Extortion — tl;dr: The Clop ransomware gang has exploited a critical vulnerability (CVE-2025-61882) in Oracle E-Business Suite, allowing unauthenticated remote code execution. This vulnerability has been actively targeted since August

By Luciano Ferrari 15 Jan 2026
Clop Exploits Oracle EBS CVE-2025-61882: A New Era of Data Extortion

News

Clop Exploits Oracle EBS CVE-2025-61882: A New Era of Data Extortion

Wednesday, January 14, 2026 Top 5 Cybersecurity Stories You Should Know 1. Clop Exploits Oracle EBS CVE-2025-61882: A New Era of Data Extortion — tl;dr: The Clop ransomware gang has exploited a critical vulnerability (CVE-2025-61882) in Oracle E-Business Suite, allowing unauthenticated remote code execution. Since August 2025, they have targeted

By Luciano Ferrari 14 Jan 2026
ServiceNow Patches Critical CVE-2025-12420 Vulnerability in AI Platform

News

ServiceNow Patches Critical CVE-2025-12420 Vulnerability in AI Platform

Tuesday, January 13, 2026 Top 5 Cybersecurity Stories You Should Know 1. ServiceNow Patches Critical CVE-2025-12420 Vulnerability in AI Platform — tl;dr: ServiceNow has addressed a critical security flaw, CVE-2025-12420, in its AI Platform that allowed unauthenticated users to impersonate others and perform unauthorized actions. The vulnerability, with a CVSS

By Luciano Ferrari 13 Jan 2026
Microsoft Reports Ransomware Gangs Targeting Cloud Environments with New Tactics

News

Microsoft Reports Ransomware Gangs Targeting Cloud Environments with New Tactics

Monday, January 12, 2026 Top 5 Cybersecurity Stories You Should Know 1. Microsoft Reports Ransomware Gangs Targeting Cloud Environments with New Tactics — tl;dr: In its Q1 2025 analysis, Microsoft Threat Intelligence warns that ransomware groups are increasingly exploiting cloud environments using sophisticated techniques. Notably, the North Korean state-affiliated actor

By Luciano Ferrari 12 Jan 2026
#StopRansomware Advisory: Interlock Ransomware Targets Organizations

News

#StopRansomware Advisory: Interlock Ransomware Targets Organizations

Friday, January 9, 2026 Top 5 Cybersecurity Stories You Should Know 1. #StopRansomware Advisory: Interlock Ransomware Targets Organizations — tl;dr: The CISA, FBI, and other agencies released a joint advisory on Interlock ransomware, first observed in September 2024, affecting businesses and critical infrastructure in North America and Europe. This ransomware

By Luciano Ferrari 09 Jan 2026
#StopRansomware Advisory: Interlock Ransomware Threats and Mitigation

News

#StopRansomware Advisory: Interlock Ransomware Threats and Mitigation

Thursday, January 8, 2026 Top 5 Cybersecurity Stories You Should Know 1. #StopRansomware Advisory: Interlock Ransomware Threats and Mitigation — tl;dr: The CISA, FBI, HHS, and MS-ISAC have issued a joint advisory on Interlock ransomware, first observed in September 2024, which targets businesses and critical infrastructure in North America and

By Luciano Ferrari 08 Jan 2026
See all
LufSec

LufSec

Your Hub for Cybersecurity Training & Research

LufSec
  • Sign up
  • Privacy Policy
  • Courses
Powered by Ghost

Join 500+ cybersecurity readers

Join our community for hands-on hacking tips, AI risk insights, and cybersecurity news.