LATEST NEWS

VIEW ALL
Lazarus APT targets crypto wallets using cross-platform JavaScript stealer
Pierluigi Paganini February 06, 2025

The North Korea-linked APT group Lazarus uses a cross-platform JavaScript stealer to target crypto wallets in a new hacking campaign. Bitdefender researchers reported that the North Korea-linked&n ...

U.S. CISA adds Linux kernel flaw to its Known Exploited Vulnerabilities catalog
Pierluigi Paganini February 05, 2025

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux kernel vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agen ...

U.S. CISA adds Microsoft .NET Framework, Apache OFBiz, and Paessler PRTG Network Monitor flaws to its Known Exploited Vulnerabilities catalog
Pierluigi Paganini February 05, 2025

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft .NET Framework, Apache OFBiz, and Paessler PRTG Network Monitor flaws to its Known Exploited Vulnerabilities catalog. Th ...

SparkCat campaign target crypto wallets using OCR to steal recovery phrases
Pierluigi Paganini February 05, 2025

In late 2024, Kaspersky experts discovered a malicious campaign, called SparkCat, spreading malware to target crypto wallets. In March 2023, ESET found malware in modified versions of messengers u ...

recent articles

Hacking
U.S. CISA adds IBM, SignalWire FreeSwitch, OpenSSH, and GPUStack flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds IBM, SignalWire FreeSwitch, OpenSSH, and GPUStack flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity an ...

Pierluigi Paganini November 10, 2026
APT
Russia-Linked APT Turla Turned Exchange Servers Into Their Own Control Room

ESET found Russia-Linked APT group Turla using a new toolset, dubbed Cereal, on government Exchange servers in Kazakhstan and Romania. ESET Research detailed a previously undocumented toolset it ...

Pierluigi Paganini November 10, 2026
Hacking
iOS Sandbox Escape Is Public, and Apple Hasn't Confirmed a Fix

A public iOS sandbox escape could expose wallet keys, Binance warns. No attacks are reported and no fix is confirmed. On 10 November, Binance warned users about a public iOS sandbox escape that le ...

Pierluigi Paganini November 10, 2026
Breaking News
Google fixes the eighth actively exploited Chrome zero-day of 2026

Google patched nine Chrome flaws, including a V8 vulnerability tracked as CVE-2026-125350, that attackers have been actively exploiting in the wild. Google has addressed multiple security vulnerab ...

Pierluigi Paganini November 10, 2026
Data Breach
Iris Ohyama data breach may expose personal information of 7.7 million people

Iris Ohyama warns that a cloud data breach may have exposed personal information of 7.7 million customers, including names and passwords. Japanese household goods manufacturer Iris Ohyama has disc ...

Pierluigi Paganini November 10, 2026
Hacking
France Blames Iran for the Supermarket Fridge Attacks

France blames Iran for supermarket fridge attacks. What’s known, what remains unclear, and how to secure exposed controllers. French Foreign Minister Jean-Noël Barrot said Iran’s Revolutionar ...

Pierluigi Paganini November 09, 2026
Cyber Crime
QNAP Warns Users as Plex2Shell Flaws Are Used to Hack NAS Devices

Taiwanese vendor QNAP urges users to update Plex Media Server after reports of NAS compromises through the Plex2Shell vulnerability chain. QNAP urges users to update Plex Media Server through the ...

Pierluigi Paganini November 09, 2026
Hacking
CISA and the FBI Warn Of Attacks against Industrial Refrigeration Controllers

US agencies warn attackers are going after industrial refrigeration controllers. The fixes are basic, and most start with getting them off the internet. CISA, the FBI, HHS, USDA and the Department ...

Pierluigi Paganini November 09, 2026
Malware
Fake GitHub Security Tools Infect Over 2,000 PCs With Malware

Fake GitHub security tools are spreading malware that disables defenses, steals sensitive data and infects over 2,000 PCs. Cybersecurity firm Doctor Web has found malware hidden in GitHub projects ...

Pierluigi Paganini November 09, 2026
Cyber warfare
The BBC has a plan for a Black Sky event, and it runs on FM radio

The BBC plans to use emergency FM radio to keep the UK informed during prolonged blackouts, with a self-sufficient studio ready for 72 hours. If electricity fails across the UK for days, the BBC s ...

Pierluigi Paganini November 09, 2026
Cyber Crime
Don’t Hand Propaganda a Gift: Reading the Brenner Base Tunnel SE Breach Calmly

Brenner Base Tunnel SE confirms a breach and Everest claims 812 GB. What we know, what we don’t, and why overblown alarm helps propaganda more than the attackers. Brenner Base Tunnel (BBT) SE, t ...

Pierluigi Paganini November 08, 2026
Artificial Intelligence
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 7

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, ...

Pierluigi Paganini November 08, 2026
Malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 122

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Unknown APT uses NetamLoader to attack a ...

Pierluigi Paganini November 08, 2026
Security
Security Affairs newsletter Round 603 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini November 08, 2026
Cyber Crime
Attackers Exploit Third-Party Provider to Raid French Bank Crédit Mutuel Arkéa

French Bank Crédit Mutuel Arkéa says hackers exploited a service provider to steal up to $133 million using the bank’s own account. French cooperative bank Crédit Mutuel Arkéa was hit by a c ...

Pierluigi Paganini November 08, 2026
Artificial Intelligence
Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches

Hunt.io traced ARTEX servers and AI-powered hacking tools used in breaches affecting seven South Korean financial institutions. Between late September and early October 2026, seven South Korean fi ...

Pierluigi Paganini November 07, 2026
Artificial Intelligence
One Product Isn't the Problem: Monetizing an AI Portfolio Without Confusing Your Customers

Software vendors can boost revenue by tracking customer usage across products, while AI accelerates pricing and consumption decisions. It is hard to find any software vendor that sells just one pr ...

Pierluigi Paganini November 07, 2026
Security
U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds SonicWall SonicOS SSLVPN vulnerability CVE-2026-19868 to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Sonic ...

Pierluigi Paganini November 07, 2026
Security
White House Network Appears in Global Residential Proxy Traffic

Layer3 found residential proxy traffic using the White House network, raising concerns about potential exposure of internal systems. Layer3 Intel says it found residential proxy traffic leaving th ...

Pierluigi Paganini November 06, 2026
Artificial Intelligence
OpenAI Rates GPT-6 Cyber Critical After Major Vulnerability Discoveries

OpenAI GPT-6 Cyber found 81 high-severity Firefox flaws and hundreds of Linux bugs, raising new questions about AI-powered cyber risks. OpenAI has introduced GPT-6 Cyber, a model built for securit ...

Pierluigi Paganini November 06, 2026