LATEST NEWS

VIEW ALL
Gameover Zeus Botnet disrupted by multinational effort
Pierluigi Paganini June 03, 2014

The DoJ and the FBI announced a multinational effort to disrupt the GameOver Zeus botnet responsible for the theft of millions of dollars worldwide. The U.S. DoJ in collaboration with FBI and foreign ...

Cupid attack, Heartbleed Attack Vectors target Enterprise Wireless and Android Devices
Pierluigi Paganini June 02, 2014

A Portuguese security expert has uncovered the Cupid attack, a new Heartbleed attack vector which can impact Android devices, enterprise wireless networks and other connected devices. Cupid is the n ...

A new way to bypass Secure Boot security mechanism of UEFI
Pierluigi Paganini June 02, 2014

Security Experts discovered a new attack method to defeat Secure Boot security mechanism of the UEFI (Unified Extensible Firmware Interface). The Secure Boot security mechanism of the UEFI (Unified E ...

Hackers threatens major cyber-attack on World Cup 2014
Pierluigi Paganini June 01, 2014

Sporting events are an excellent scenario for hacktivists, protest against the World Cup in Brazil are increasing and hackers announced a major cyber attack. The football World Cup in Brazil 2014 i ...

recent articles

Security
United Natural Foods Expects $400M revenue impact from June cyber attack

United Natural Foods Projects (UNFI) expects a $350–$400M sales hit from a June cyberattack, with $50–$60M in net income impact. United Natural Foods, Inc. (UNFI), the main distributor for Ama ...

Pierluigi Paganini July 17, 2025
Security
Cisco patches critical CVE-2025-20337 bug in Identity Services Engine with CVSS 10 Severity

Cisco warns of CVE-2025-20337, a critical ISE flaw (CVSS 10) allowing remote code execution with root privileges. Cisco addressed a critical vulnerability, tracked as CVE-2025-20337 (CVSS score of ...

Pierluigi Paganini July 17, 2025
Hacking
UNC6148 deploys Overstep malware on SonicWall devices, possibly for ransomware operations

UNC6148 targets SonicWall devices with Overstep malware, using a backdoor and rootkit for data theft, extortion, or ransomware. Google’s Threat Intelligence Group warns that a threat actor track ...

Pierluigi Paganini July 17, 2025
Cyber Crime
Operation Eastwood disrupted operations of pro-Russian hacker group NoName057(16)

International law enforcement operation disrupted the activities of the pro-Russia hacking group NoName057(16). European and U.S. authorities disrupted the activities of the pro-Russian hacktivist ...

Pierluigi Paganini July 16, 2025
Intelligence
Salt Typhoon breach: Chinese APT compromises U.S. Army National Guard network

China-linked APT Salt Typhoon breached a U.S. Army National Guard unit’s network, accessed configs, and intercepted communications with other units. A DoD report warns that China-nexus hacking g ...

Pierluigi Paganini July 16, 2025
Cyber Crime
Former US Army member confesses to Telecom hack and extortion conspiracy

A former US Army soldier pleaded guilty to hacking telecom databases, stealing data, and extorting companies by threatening to release the stolen info. A former Army soldier, Cameron John Wagenius ...

Pierluigi Paganini July 16, 2025
Hacking
CVE-2025-6554 marks the fifth actively exploited Chrome Zero-Day patched by Google in 2025

Google released security patches to address multiple Chrome vulnerabilities, including one flaw that has been exploited in the wild. Google released fixes for six Chrome flaws, including one activ ...

Pierluigi Paganini July 16, 2025
Security
DDoS peaks hit new highs: Cloudflare mitigated massive 7.3 Tbps assault

Cloudflare blocked 7.3M DDoS attacks in Q2 2025, down from 20.5M in Q1, while hyper-volumetric attacks surged with 6,500+ blocked, averaging 71 daily. Cloudflare mitigated 7.3M DDoS attacks in Q2 ...

Pierluigi Paganini July 16, 2025
Hacking
U.S. CISA adds Wing FTP Server flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Wing FTP Server flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (C ...

Pierluigi Paganini July 16, 2025
Malware
Android Malware Konfety evolves with ZIP manipulation and dynamic loading

A new Konfety Android malware variant uses a malformed ZIP and obfuscation to evade detection, posing as fake apps with no real functionality. Zimperium zLabs researchers are tracking a new, sophi ...

Pierluigi Paganini July 15, 2025
Data Breach
Belk hit by May cyberattack: DragonForce stole 150GB of data

Ransomware group DragonForce claims it attacked U.S. retailer Belk in May, stealing over 150GB of data in a disruptive cyberattack. The infamous Ransomware group DragonForce claimed responsibility ...

Pierluigi Paganini July 15, 2025
Hacking
North Korea-linked actors spread XORIndex malware via 67 malicious npm packages

North Korea-linked hackers uploaded 67 malicious npm packages with XORIndex malware, hitting 17K+ downloads in ongoing supply chain attacks. North Korea-linked threat actors behind the Contagious ...

Pierluigi Paganini July 15, 2025
Cyber Crime
FBI seized multiple piracy sites distributing pirated video games

FBI seizes multiple piracy sites for Nintendo Switch and PlayStation 4 games, dismantling their infrastructure. The FBI, with the help of the Dutch FIOD, seized multiple piracy sites distributing ...

Pierluigi Paganini July 15, 2025
Hacking
An attacker using a $500 radio setup could potentially trigger train brake failures or derailments from a distance

A 20-year-old flaw in End-of-Train and Head-of-Train systems could let hackers trigger emergency braking, finally getting proper attention. US CISA has warned about a critical flaw, tracked as CVE ...

Pierluigi Paganini July 15, 2025
Cyber Crime
Interlock ransomware group deploys new PHP-based RAT via FileFix

Interlock ransomware group deploys new PHP-based RAT via FileFix (a ClickFix variant) in a widespread campaign targeting multiple industries. The Interlock ransomware group is deploying a new PHP- ...

Pierluigi Paganini July 14, 2025
Data Breach
Global Louis Vuitton data breach impacts UK, South Korea, and Turkey

Louis Vuitton data breach affects customers in the UK, South Korea, Turkey, and possibly more countries, with notifications underway. Customers of French luxury retailer Louis Vuitton are being no ...

Pierluigi Paganini July 14, 2025
Security
Experts uncover critical flaws in Kigen eSIM technology affecting billions

Experts devised a new hack targeting Kigen eSIM tech, used in over 2B devices, exposing smartphones and IoT users to serious security risks. Researchers at Security Explorations uncovered a new ha ...

Pierluigi Paganini July 14, 2025
Intelligence
Spain awarded €12.3 million in contracts to Huawei

Spain gives Huawei wiretap contracts, sparking concerns over potential Chinese government access due to Huawei’s links to Beijing. The Spanish Ministry of the Interior has awarded €12.3 millio ...

Pierluigi Paganini July 14, 2025
Security
Patch immediately: CVE-2025-25257 PoC enables remote code execution on Fortinet FortiWeb

PoC exploits released for critical Fortinet FortiWeb flaw allowing pre-auth RCE. Fortinet urges users to patch. Proof-of-concept (PoC) exploits for CVE-2025-25257 in Fortinet FortiWeb (CVSS 9.8) ...

Pierluigi Paganini July 13, 2025
Hacking
Wing FTP Server flaw actively exploited shortly after technical details were made public

Hackers exploit critical Wing FTP flaw (CVE-2025-47812) for remote code execution with root/system rights after details leaked on June 30. Threat actors are exploiting a critical flaw, tracked as ...

Pierluigi Paganini July 13, 2025