LATEST NEWS

VIEW ALL
HiddenWasp, a sophisticated Linux malware borroes from Mirai and Azazel
Pierluigi Paganini May 31, 2019

Security experts at Intezer have discovered a new Linux malware tracked as ‘HiddenWasp’ that borrows from Mirai, Azazel malicious codes. HiddenWasp is a new sophisticated Linux malware st ...

The Pyramid Hotel Group data leak exposes 85GB of security logs of major hotel chains
Pierluigi Paganini May 31, 2019

vpnMentor researches have recently discovered that hotel brands managed by The Pyramid Hotel Group have suffered a data leak. vpnMentor experts have discovered that hotel brands managed by The Pyr ...

Checkers double drive-thru restaurants chain discloses card breach
Pierluigi Paganini May 30, 2019

Checkers and Rally's, one of the largest chains of double drive-thru restaurants in the United States, disclosed a credit card breach. "We recently became aware of a data security issue involving ...

Convert Plus WordPress plugin flaw allows hackers to create Admin accounts
Pierluigi Paganini May 30, 2019

The WordPress plugin Convert Plus is affected by a critical flaw that could be exploited by an unauthenticated attacker to create accounts with administrator privileges. The WordPress plugin Conve ...

recent articles

Malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 109

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Fake Xeno Roblox Cheats Deliver Powerful ...

Pierluigi Paganini August 09, 2026
Security
Security Affairs newsletter Round 589 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini August 09, 2026
Hacking
Webmail CSS Attacks Expose a New Risk for AI-Powered Email Tools

CSS attacks on major webmail services can steal credentials, hijack sessions and manipulate AI tools connected to users’ inboxes. PortSwigger researcher Gareth Heyes demonstrated something that ...

Pierluigi Paganini August 09, 2026
Intelligence
Palo Alto Networks Faces China Cybersecurity Review Amid Rising Tech Tensions

China opened a cybersecurity review of Palo Alto Networks, citing national security concerns but giving no details about the reasons behind the probe. China’s Cyberspace Administration (CAC) ann ...

Pierluigi Paganini August 08, 2026
Hacking
Metabase Zero-Day Exploited in the Wild, Exposing Admin Access and Sensitive Data

Attackers exploited a CVSS 10 Metabase zero-day to gain admin access and steal sensitive data. Framework confirmed it was among the victims. Metabase just confirmed something no analytics vendor w ...

Pierluigi Paganini August 08, 2026
Hacking
U.S. CISA adds a Progress LoadMaster flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Progress LoadMaster vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Secu ...

Pierluigi Paganini August 08, 2026
Data Breach
Unlimited Technology Systems Data Breach Exposes Data of 3.8 Million Healthcare Patients

Hackers stole personal, medical, and insurance data of 3.8 million people from Unlimited Technology Systems' data center. Unlimited Technology Systems disclosed a data breach affecting more than 3 ...

Pierluigi Paganini August 08, 2026
Hacking
WordPress XSS2Shell Flaw Turns Simple Login Bug Into Full Server Takeover

WordPress XSS2Shell flaw enables admin takeover and remote code execution. Users should update to patched versions. Researchers at Pwn just published a report on a vulnerability chain they're call ...

Pierluigi Paganini August 07, 2026
Security
Hackers Impersonate IT Support to Breach Leading Financial Companies

Hackers used fake IT help desks to steal MFA credentials, targeting over 200 firms, including major financial companies. A hacking campaign operating under names including Redact, Pink, Falcon, an ...

Pierluigi Paganini August 07, 2026
Laws and regulations
Meta Ordered to Pay $567 Million Over Child Safety Failures in New Mexico Case

Meta was ordered to pay $567M after a judge ruled its platforms harmed children, bringing New Mexico penalties to $942M. Meta 's child-safety legal bill just got another half-billion dollars heavi ...

Pierluigi Paganini August 07, 2026
Security
Researchers Discover Hidden Backdoor in 20 Router Models Allowing Remote Root Access

A hidden backdoor in 20 router models lets remote servers execute commands as root, putting affected devices at risk of takeover. Jacob Baines had a router on his desk that kept trying to call hom ...

Pierluigi Paganini August 07, 2026
Artificial Intelligence
AI Deepfakes Used to Impersonate OnlyFans Creators in New Scam

Scammers use AI deepfakes to impersonate OnlyFans creators, trick fans into sending money, then disappear after payment. Criminals are building fake identities using AI-generated deepfakes of real ...

Pierluigi Paganini August 07, 2026
Data Breach
Exposed SISVISA Database Leaks 102,000 Brazilian Health Surveillance Records

An exposed SISVISA database leaked 102,215 Brazilian health records, exposing IDs, tax data, and regulatory documents without authentication. Researcher Jeremiah Fowler found a publicly accessible ...

Pierluigi Paganini August 06, 2026
Cyber Crime
Ransom Cartel Leader Sentenced to 16 Years in U.S.

A U.S. court sentenced Ransom Cartel founder Maksim Silnikau to 16 years for running a ransomware-as-a-service operation. Maksim Silnikau (aka "J.P. Morgan," "lansky," and "xxx,") built a ransomwa ...

Pierluigi Paganini August 06, 2026
Security
Meta AI Model Hacked a Company During Testing, Marking Third AI Lab Incident

Meta says an AI model hacked a company during testing after accidental internet access, marking the third disclosed AI lab breach in weeks. Meta confirmed that one of its AI models breached an uni ...

Pierluigi Paganini August 06, 2026
Security
U.S. CISA adds a JetBrains TeamCity flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a JetBrains TeamCity vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Secur ...

Pierluigi Paganini August 06, 2026
Security
Snowflake Hacker Pleads Guilty After Breaching 165 Companies and Stealing Billions of Records

Snowflake hacker Connor Moucka pleads guilty after breaching 165 organizations, stealing billions of records, and extorting victims. Connor Riley Moucka, 26, of Kitchener, Ontario, pleaded guilty ...

Pierluigi Paganini August 06, 2026
Artificial Intelligence
AI Deception Emerges in Cyber Tests as Agents Target Real People and Systems

AISI found AI agents taking unsanctioned online actions, including social engineering and code attacks, during controlled cyber tests. The UK’s AI Security Institute (AISI) has put something unc ...

Pierluigi Paganini August 05, 2026
Uncategorized
Brown Health Medical Group-MA Data Breach Exposes Information of 311,000 Individuals

Brown Health Medical Group-MA breach exposed personal, medical, and financial data of over 311,000 individuals after hackers accessed its servers. Brown Health Medical Group-MA data breach exposed ...

Pierluigi Paganini August 05, 2026
Hacking
U.S. CISA adds Langflow, Apache Tomcat, and N-able N-central flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Langflow, Apache Tomcat, and N-able N-central flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Inf ...

Pierluigi Paganini August 05, 2026