MUST READ

Ransomware Never Stopped: Over 9,000 Confirmed Attacks Since 2018

 | 

222 GitHub Repositories Linked to Fake Go Package Malware Operation

 | 

Former Ransomware Negotiator Sentenced to 70 Months in Prison for Secretly Helping BlackCat Gang

 | 

GigaWiper Merges Three Malware Families Into One Destructive Backdoor

 | 

INTERPOL Operation First Light Nets 5,811 Arrests and Seizes $293 Million

 | 

GodDamn Ransomware Uses PoisonX to Blind Security Software

 | 

AssuranceAmerica Breach Exposes 7 Million Driver’s Licenses After Employee Account Hack

 | 

Microsoft fixed Defender flaw RoguePlanet (CVE-2026-50656)

 | 

Fake VPN and 7-Zip Apps Turn Victims Into Residential Proxy Nodes

 | 

Ubiquiti Patches Critical UniFi OS Flaws Allowing Command Injection and Privilege Escalation

 | 

A Hacker Claims 35 GB of Accenture Source Code. The Company discloses the data breach

 | 

Telegram-Hosted RedWing Malware Lets Anyone Rent Android Spyware Tools

 | 

U.S. CISA adds Adobe ColdFusion, Joomlack Page Builder, Langflow, and JoomShaper SP Page Builder flaws to its Known Exploited Vulnerabilities catalog

 | 

CISA Deploys Anthropic’s Mythos AI to Hunt Vulnerabilities in U.S. Government Code

 | 

Critical Gitea Docker Bug Under Active Exploitation Exposes Repositories and Secrets

 | 

Spanish Police Arrest Man Linked to CARR, Z-Pentest, and NoName057(16)

 | 

Hidden Tenda Router Backdoor Grants Admin Access, No Patch Available

 | 

AI-Generated Malware Powers New Armored Likho APT Campaign

 | 

Januscape: 16-Year-Old Linux KVM Bug Enables Cloud VM Escape Attacks

 | 

Adobe ColdFusion flaw CVE-2026-48282 now exploited in the wild

 | 

LATEST NEWS

VIEW ALL
Malware
Welcome on board
Pierluigi Paganini November 01, 2011

Welcome on board Welcome! If you are curious, interested in the subject and looking for a place with a few clicks you canbe updated on what happens in the world … well you you’ve fo ...

top articles

Hackers access Booking.com user data, company secures systems
April 13, 2026
Inside ZionSiphon: politically driven malware aims at Israeli water systems
April 17, 2026
RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
April 23, 2026
Checkmarx supply chain attack impacts Bitwarden npm distribution path
April 24, 2026
Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed
April 26, 2026

newsletter

Subscribe to my email list and stay
up-to-date!

most popular

VIEW ALL
Cyber Crime

Ransomware Never Stopped: Over 9,000 Confirmed Attacks Since 2018

July 10, 2026

Security
222 GitHub Repositories Linked to Fake Go Package Malware Operation

July 10, 2026

Cyber Crime
Former Ransomware Negotiator Sentenced to 70 Months in Prison for Secretly Helping BlackCat Gang

July 10, 2026

Malware
GigaWiper Merges Three Malware Families Into One Destructive Backdoor

July 10, 2026

Security
INTERPOL Operation First Light Nets 5,811 Arrests and Seizes $293 Million

July 09, 2026

recent articles

Cyber Crime
Ransomware Never Stopped: Over 9,000 Confirmed Attacks Since 2018

Ransomware remains above 1,400 attacks yearly since 2023. Qilin leads in 2026, while the U.S. remains the main target. Ransomnews has independently confirmed 9,291 ransomware attacks worldwide bet ...

Pierluigi Paganini July 10, 2026
Security
222 GitHub Repositories Linked to Fake Go Package Malware Operation

Researchers uncovered 222 GitHub repositories spreading malware through fake Go packages, delivering loaders, stealers, RATs, and cryptominers. Socket's security research team started with the inv ...

Pierluigi Paganini July 10, 2026
Cyber Crime
Former Ransomware Negotiator Sentenced to 70 Months in Prison for Secretly Helping BlackCat Gang

A former ransomware negotiator was sentenced to nearly six years for secretly helping BlackCat extort victims while betraying his clients. A U.S. court sentenced former ransomware negotiator Angel ...

Pierluigi Paganini July 10, 2026
Malware
GigaWiper Merges Three Malware Families Into One Destructive Backdoor

Microsoft uncovered GigaWiper, a modular Go backdoor combining three malware families with espionage, remote control, and destructive wiping features. In October 2025, Microsoft's threat intellige ...

Pierluigi Paganini July 10, 2026
Security
INTERPOL Operation First Light Nets 5,811 Arrests and Seizes $293 Million

INTERPOL's Operation First Light 2026 led to 5,811 arrests, blocked $293M in criminal assets, and disrupted global fraud and money laundering networks. INTERPOL coordinated a four-month operation ...

Pierluigi Paganini July 09, 2026
Malware
GodDamn Ransomware Uses PoisonX to Blind Security Software

GodDamn ransomware uses the signed PoisonX driver to disable security tools, marking a more advanced version of the Beast ransomware family. Symantec's Threat Hunter Team found a new ransomware fa ...

Pierluigi Paganini July 09, 2026
Data Breach
AssuranceAmerica Breach Exposes 7 Million Driver’s Licenses After Employee Account Hack

AssuranceAmerica confirmed a breach exposing nearly 7 million driver's licenses after hackers compromised an employee account and stole customer data. U.S. auto insurer AssuranceAmerica has confir ...

Pierluigi Paganini July 09, 2026
Security
Microsoft fixed Defender flaw RoguePlanet (CVE-2026-50656)

Microsoft fixed RoguePlanet (CVE-2026-50656), a Defender flaw allowing local attackers to gain higher privileges through the Malware Protection Engine. Microsoft released security updates for Rogu ...

Pierluigi Paganini July 09, 2026
Malware
Fake VPN and 7-Zip Apps Turn Victims Into Residential Proxy Nodes

Fake apps like WireVPN and a trojanized 7-Zip turn victims' devices into residential proxies, letting criminals route traffic through their IPs. Infoblox's threat research team started pulling on ...

Pierluigi Paganini July 09, 2026
Security
Ubiquiti Patches Critical UniFi OS Flaws Allowing Command Injection and Privilege Escalation

Ubiquiti patched seven UniFi OS flaws, including critical CVE-2026-50746, which allows command injection in UniFi Connect Application. Ubiquiti released security updates for seven critical UniFi O ...

Pierluigi Paganini July 08, 2026
Data Breach
A Hacker Claims 35 GB of Accenture Source Code. The Company discloses the data breach

Accenture confirmed a breach after a hacker claimed to steal 35 GB of source code, keys, and Azure credentials now offered for sale. A threat actor using the handle "888" claimed on the cybercrime ...

Pierluigi Paganini July 08, 2026
Malware
Telegram-Hosted RedWing Malware Lets Anyone Rent Android Spyware Tools

RedWing: The Android Banking Trojan You Can Rent on Telegram for Less Than a Coffee Subscription Zimperium's zLabs team has uncovered RedWing, an Android spyware operation sold as a subscription s ...

Pierluigi Paganini July 08, 2026
Hacking
U.S. CISA adds Adobe ColdFusion, Joomlack Page Builder, Langflow, and JoomShaper SP Page Builder flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Adobe ColdFusion, Joomlack Page Builder, Langflow, and JoomShaper SP Page Builder flaws to its Known Exploited Vulnerabilities catalo ...

Pierluigi Paganini July 08, 2026
Artificial Intelligence
CISA Deploys Anthropic’s Mythos AI to Hunt Vulnerabilities in U.S. Government Code

CISA is using Anthropic's Mythos AI to scan federal code for vulnerabilities, aiming to find flaws before hackers and foreign intelligence services. Three sources familiar with the matter told Reu ...

Pierluigi Paganini July 08, 2026
Hacking
Critical Gitea Docker Bug Under Active Exploitation Exposes Repositories and Secrets

Attackers are exploiting a critical Gitea flaw (CVE-2026-20896) that bypasses authentication with a single HTTP header, exposing repositories and sensitive data. Sysdig researchers warn that attac ...

Pierluigi Paganini July 07, 2026
Hacktivism
Spanish Police Arrest Man Linked to CARR, Z-Pentest, and NoName057(16)

Spain arrested a suspected CARR and Z-Pentest collaborator in an FBI-led probe for aiding pro-Russian hackers, coordinating attacks, and using crypto. Spanish National Police arrested a man in Pal ...

Pierluigi Paganini July 07, 2026
Security
Hidden Tenda Router Backdoor Grants Admin Access, No Patch Available

CERT/CC warns an unpatched backdoor in several Tenda routers lets attackers bypass login and gain full admin access with a hidden password. CERT/CC published an alert documenting an undocumented a ...

Pierluigi Paganini July 07, 2026
APT
AI-Generated Malware Powers New Armored Likho APT Campaign

Armored Likho APT uses AI-generated malware, phishing, and BusySnake Stealer to target governments and power grids in Russia, Kazakhstan, and Brazil. Kaspersky's threat research team has documente ...

Pierluigi Paganini July 07, 2026
Security
Januscape: 16-Year-Old Linux KVM Bug Enables Cloud VM Escape Attacks

Januscape: A 16-year-old Linux KVM flaw lets cloud VM tenants crash hosts and potentially escape guests. It affects Intel and AMD systems. Security researcher Hyunwoo Kim has published details of ...

Pierluigi Paganini July 07, 2026
Hacking
Adobe ColdFusion flaw CVE-2026-48282 now exploited in the wild

Attackers are exploiting the critical Adobe ColdFusion flaw CVE-2026-48282, which allows remote code execution on unpatched servers. Attackers have started exploiting CVE-2026-48282, a maximum-sev ...

Pierluigi Paganini July 06, 2026