MUST READ

UNM Health Shuts Clinics and Diverts Patients During Security Incident

 | 

Russian APT29 Targets Mobile Users with Watering Hole Attacks

 | 

U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog

 | 

U.S. Charges Canadian Man in Alleged Hack of University Supercomputers

 | 

Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

 | 

Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe

 | 

CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code

 | 

U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog

 | 

Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack

 | 

Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions

 | 

Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers

 | 

NIS2 Makes Board Members Personally Liable for Access Control Decisions

 | 

Apple’s spyware notifications reach the Bundestag: what the BSI says to do now

 | 

VOLTA, the infostealer that asks an AI which victims are worth the effort

 | 

New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia

 | 

Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens

 | 

Chainalysis Investigates Security Incident Involving AI-Driven Attack Techniques

 | 

FBI Blames North Korea for $6 Billion Binance Crypto Theft

 | 

SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 6

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 121

 | 

LATEST NEWS

VIEW ALL
Security
UNM Health Shuts Clinics and Diverts Patients During Security Incident
Pierluigi Paganini November 05, 2026

A cybersecurity incident forced UNM Health to divert ambulances, cancel appointments, and pause care while it contained the threat. On Monday, October 26, the University of New Mexico Health Syste ...

APT
Russian APT29 Targets Mobile Users with Watering Hole Attacks
Pierluigi Paganini November 05, 2026

Russia-linked group APT29 targeted iOS and Android users through hijacked websites and a compromised analytics service. Sekoia says a large-scale watering hole campaign is going after iOS and Andr ...

Hacking
U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog
Pierluigi Paganini November 05, 2026

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adde ...

Cyber Crime
U.S. Charges Canadian Man in Alleged Hack of University Supercomputers
Pierluigi Paganini November 05, 2026

A Canadian man was extradited to the U.S. to face charges over hacking universities and hijacking their computers to mine cryptocurrency. A Canadian man, Ryan James Roach (35), has been extradicte ...

top articles

Hackers access Booking.com user data, company secures systems
April 13, 2026
Inside ZionSiphon: politically driven malware aims at Israeli water systems
April 17, 2026
RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
April 23, 2026
Checkmarx supply chain attack impacts Bitwarden npm distribution path
April 24, 2026
Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed
April 26, 2026

newsletter

Subscribe to my email list and stay
up-to-date!

most popular

VIEW ALL
Security

UNM Health Shuts Clinics and Diverts Patients During Security Incident

November 05, 2026

APT
Russian APT29 Targets Mobile Users with Watering Hole Attacks

November 05, 2026

Hacking
U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog

November 05, 2026

Cyber Crime
U.S. Charges Canadian Man in Alleged Hack of University Supercomputers

November 05, 2026

Security
Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

November 04, 2026

recent articles

Security
UNM Health Shuts Clinics and Diverts Patients During Security Incident

A cybersecurity incident forced UNM Health to divert ambulances, cancel appointments, and pause care while it contained the threat. On Monday, October 26, the University of New Mexico Health Syste ...

Pierluigi Paganini November 05, 2026
APT
Russian APT29 Targets Mobile Users with Watering Hole Attacks

Russia-linked group APT29 targeted iOS and Android users through hijacked websites and a compromised analytics service. Sekoia says a large-scale watering hole campaign is going after iOS and Andr ...

Pierluigi Paganini November 05, 2026
Hacking
U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adde ...

Pierluigi Paganini November 05, 2026
Cyber Crime
U.S. Charges Canadian Man in Alleged Hack of University Supercomputers

A Canadian man was extradited to the U.S. to face charges over hacking universities and hijacking their computers to mine cryptocurrency. A Canadian man, Ryan James Roach (35), has been extradicte ...

Pierluigi Paganini November 05, 2026
Security
Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

Barracuda patched two flaws that can be chained to give attackers root access to Email Security Gateway appliances. Barracuda has patched two vulnerabilities that can be chained to gain root acces ...

Pierluigi Paganini November 04, 2026
Hacking
Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe

Cyberattacks disrupted refrigeration monitoring systems at three French blood banks, amid similar attacks targeting European supermarkets. A cyberattack has hit three regional blood banks in Franc ...

Pierluigi Paganini November 04, 2026
Mobile
CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code

Critical Android flaw CVE-2026-58868 could allow remote code execution without user interaction on devices running Android 14 through 17. Google has fixed CVE-2026-58868, a critical Android vulner ...

Pierluigi Paganini November 04, 2026
Security
U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds WordPress flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)  ...

Pierluigi Paganini November 04, 2026
Cyber Crime
Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack

Binance reveals how fake job interviews, malware and internal AI abuse enabled attackers to steal $6.34 billion. The Binance security incident on October 29 shows how a fake recruitment process ca ...

Pierluigi Paganini November 03, 2026
Security
Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions

Synology warns of ransomware attacks exploiting a 2024 flaw in outdated NAS devices, urging users to update DSM immediately. A security fix released in 2024 is now at the centre of ransomware atta ...

Pierluigi Paganini November 03, 2026
Malware
Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers

Google dismantled a 1.3 million-device botnet allegedly built by Android TV box maker Videostrong to enable ad fraud and proxy abuse. Google and its partners dismantled a backdoor called XCPE that ...

Pierluigi Paganini November 03, 2026
Laws and regulations
NIS2 Makes Board Members Personally Liable for Access Control Decisions

NIS2 Article 20 makes management bodies answerable for the access controls they approve, and boards are starting to ask for proof that those controls work. NIS2 board accountability gives director ...

Pierluigi Paganini November 03, 2026
Intelligence
Apple’s spyware notifications reach the Bundestag: what the BSI says to do now

Apple warns German Bundestag lawmakers of mercenary spyware attacks; BSI urges victims to assume compromise. The German government is warning politicians and public figures that they were targeted ...

Pierluigi Paganini November 03, 2026
Malware
VOLTA, the infostealer that asks an AI which victims are worth the effort

VOLTA is an AI-powered infostealer that steals personal data, then uses LLMs to assess victims' value and rank targets for attackers. Cisco Talos has analyzed a new Windows infostealer called VOLT ...

Pierluigi Paganini November 02, 2026
Security
New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia

A new wave of fridge cyberattacks hit supermarket refrigeration systems across five European countries, raising temperatures and causing food losses. A new wave of fridge cyberattacks has affected ...

Pierluigi Paganini November 02, 2026
Security
Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens

Hackers reportedly hit Ukraine 's and Russia 's emergency alert apps, sending fake nuclear and attack warnings and raising concerns over public safety. Ukraine and Russia both said on Sunday night ...

Pierluigi Paganini November 02, 2026
Artificial Intelligence
Chainalysis Investigates Security Incident Involving AI-Driven Attack Techniques

Chainalysis suffered a cyberattack exposing customer names, emails and user IDs, while investigation data and passwords remain safe. Blockchain analytics firm Chainalysis says it was the target of ...

Pierluigi Paganini November 02, 2026
APT
FBI Blames North Korea for $6 Billion Binance Crypto Theft

The FBI blames North Korea for stealing $6 billion from Binance and urges crypto firms to block transactions linked to the stolen funds. The FBI has named North Korea as the party behind the theft ...

Pierluigi Paganini November 01, 2026
Artificial Intelligence
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 6

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, ...

Pierluigi Paganini November 01, 2026
Malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 121

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter uCreator: virtualization-based Android s ...

Pierluigi Paganini November 01, 2026