MUST READ

U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog

 | 

Attackers Exploit Critical Drupal Commerce Core Vulnerability CVE-2026-118539

 | 

Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries

 | 

U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog

 | 

$6.3 Billion Stolen from Binance in Attack Attributed to North Korea

 | 

How to prioritize remediation after a pentest: a practitioner workflow

 | 

Hacker leaks data on more than 40,000 Homeland Security employees

 | 

Binance Investigates Suspicious Crypto Transfers Worth Up to $5.8 Billion

 | 

US Probes Suspected Hack Behind Military Base Freezer Failures

 | 

484,142 Exposed Cloud Buckets Contain 18 Billion Files

 | 

U.S. CISA adds Linux Kernel and Broadcom VMWare ESX  flaws to its Known Exploited Vulnerabilities catalog

 | 

Volt Typhoon Used Silent Train to Hide Zero-Day Attacks

 | 

Election Website Security: 42% of US County Sites Still Lack .gov Domains

 | 

ENGIE Data Breach Exposes Customer Details and Energy Contracts

 | 

Virtualine Domain Seized, but Allegedly Abusive Website Remains Online

 | 

Ads or Surveillance? Researchers Flag Suspicious Targeting of Starlink Users

 | 

CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers

 | 

U.S. CISA adds Google Brotli and Adobe Commerce and Magento flaws to its Known Exploited Vulnerabilities catalog

 | 

Three Japan-Focused Cyberattacks Show How Hackers Use AI

 | 

Italy ’s Parliament Under Cyber Pressure: Why the Attack on the Chamber Matters

 | 

LATEST NEWS

VIEW ALL
Security
U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog
Pierluigi Paganini October 31, 2026

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Age ...

Security
Attackers Exploit Critical Drupal Commerce Core Vulnerability CVE-2026-118539
Pierluigi Paganini October 31, 2026

Drupal warns that attackers are exploiting a critical authorization flaw in Commerce Core, putting vulnerable online stores at risk. Drupal warns that threat actors are exploiting a highly critica ...

Malware
Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries
Pierluigi Paganini October 30, 2026

Yoba malware uses fake ChatGPT and Claude apps to sideload malware through signed installers and deploy a cryptocurrency miner. Check Point Research has spent two months tracking a campaign it cal ...

Security
U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog
Pierluigi Paganini October 30, 2026

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency ...

top articles

Hackers access Booking.com user data, company secures systems
April 13, 2026
Inside ZionSiphon: politically driven malware aims at Israeli water systems
April 17, 2026
RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
April 23, 2026
Checkmarx supply chain attack impacts Bitwarden npm distribution path
April 24, 2026
Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed
April 26, 2026

newsletter

Subscribe to my email list and stay
up-to-date!

most popular

VIEW ALL
Security

U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog

October 31, 2026

Security
Attackers Exploit Critical Drupal Commerce Core Vulnerability CVE-2026-118539

October 31, 2026

Malware
Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries

October 30, 2026

Security
U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog

October 30, 2026

Cyber Crime
$6.3 Billion Stolen from Binance in Attack Attributed to North Korea

October 30, 2026

recent articles

Security
U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Age ...

Pierluigi Paganini October 31, 2026
Security
Attackers Exploit Critical Drupal Commerce Core Vulnerability CVE-2026-118539

Drupal warns that attackers are exploiting a critical authorization flaw in Commerce Core, putting vulnerable online stores at risk. Drupal warns that threat actors are exploiting a highly critica ...

Pierluigi Paganini October 31, 2026
Malware
Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries

Yoba malware uses fake ChatGPT and Claude apps to sideload malware through signed installers and deploy a cryptocurrency miner. Check Point Research has spent two months tracking a campaign it cal ...

Pierluigi Paganini October 30, 2026
Security
U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency ...

Pierluigi Paganini October 30, 2026
Cyber Crime
$6.3 Billion Stolen from Binance in Attack Attributed to North Korea

Binance links a $6.3 billion crypto theft to a compromised DevOps laptop, with North Korean hackers blamed by blockchain analysts. Binance was investigating suspicious transfers that early estimat ...

Pierluigi Paganini October 30, 2026
Hacking
How to prioritize remediation after a pentest: a practitioner workflow

A practical pentest workflow combines CVSS, EPSS and business impact to validate findings, prioritize fixes and document remediation decisions. Remediation prioritization after a pentest is the pr ...

Pierluigi Paganini October 30, 2026
Data Breach
Hacker leaks data on more than 40,000 Homeland Security employees

A hacker leaks personal data on more than 40,000 DHS employees, including CBP, ICE and CISA staff, after an undisclosed breach. Personal details of thousands of U.S. Department of Homeland Securit ...

Pierluigi Paganini October 30, 2026
Hacking
Binance Investigates Suspicious Crypto Transfers Worth Up to $5.8 Billion

Binance probes suspicious crypto transfers worth up to $5.8 billion as Tether and Circle freeze $1.79 billion in stablecoins linked to the activity. Binance is investigating a potential security i ...

Pierluigi Paganini October 29, 2026
Hacking
US Probes Suspected Hack Behind Military Base Freezer Failures

The Pentagon treats August freezer failures at US military bases as a suspected hack and is working with French investigators after a supermarket attack. The Pentagon is investigating freezer fail ...

Pierluigi Paganini October 29, 2026
Security
484,142 Exposed Cloud Buckets Contain 18 Billion Files

42 publicly listable cloud buckets containing 18 billion files, including exposed credentials, database dumps and backups. The Ransomnews research team counted 484,142 publicly listable cloud stor ...

Pierluigi Paganini October 29, 2026
Hacking
U.S. CISA adds Linux Kernel and Broadcom VMWare ESX  flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux Kernel and Broadcom VMWare ESX flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastruct ...

Pierluigi Paganini October 29, 2026
Intelligence
Volt Typhoon Used Silent Train to Hide Zero-Day Attacks

Volt Typhoon used disposable relay chains to hide zero-day attacks on critical systems. Lumen linked Silent Train to at least four zero-days. Lumen’s Black Lotus Labs has spent three years track ...

Pierluigi Paganini October 29, 2026
Security
Election Website Security: 42% of US County Sites Still Lack .gov Domains

US election websites show improved security, but weak email protection, non-.gov domains and third-party tracking still expose voters to risks. Millions of Americans will use websites to check the ...

Pierluigi Paganini October 29, 2026
Data Breach
ENGIE Data Breach Exposes Customer Details and Energy Contracts

ENGIE says attackers accessed French customers' contact and energy contract data through a partner sales tool. Banking data was not affected. French multinational energy company ENGIE warned custo ...

Pierluigi Paganini October 29, 2026
Cyber Crime
Virtualine Domain Seized, but Allegedly Abusive Website Remains Online

The FBI seized Virtualine, a hosting service accused of supporting criminal sites, ignoring abuse reports and helping launder money from illegal activities The FBI seized the website of Virtualine ...

Pierluigi Paganini October 29, 2026
Intelligence
Ads or Surveillance? Researchers Flag Suspicious Targeting of Starlink Users

Discover-Tech allegedly targeted Starlink users with digital ads to track their locations, according to sources cited in a new Reuters report. Digital defense firm TrendAI found that an Israeli ad ...

Pierluigi Paganini October 28, 2026
Security
CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers

CVE-2026-97631: A 16-year-old UEFI flaw (CVSS score of 9.5/10) enables pre-OS code execution. Exposed servers need firmware patches and checks. A critical flaw, tracked as CVE-2026-97631 (CVSS sco ...

Pierluigi Paganini October 28, 2026
Security
U.S. CISA adds Google Brotli and Adobe Commerce and Magento flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Brotli and Adobe Commerce and Magento flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and ...

Pierluigi Paganini October 28, 2026
Artificial Intelligence
Three Japan-Focused Cyberattacks Show How Hackers Use AI

Three Japan-focused cyberattacks show how AI helps hackers scale operations, while exploiting old systems and weak security remains key. In autumn 2026, Japanese companies and other organizations ...

Pierluigi Paganini October 28, 2026
Hacking
Italy ’s Parliament Under Cyber Pressure: Why the Attack on the Chamber Matters

Italy ’s Parliament cyberattack highlights hybrid warfare risks and the need for transparency, stronger defenses and accountability. The cyberattack targeting email accounts at Italy’s Chamber ...

Pierluigi Paganini October 27, 2026