LATEST NEWS

VIEW ALL
Microsoft Patch Tuesday updates for May 2022 fixes 3 zero-days, 1 under active attack
Pierluigi Paganini May 11, 2022

Microsoft Patch Tuesday security updates for May 2022 address three zero-day vulnerabilities, one of them actively exploited. Microsoft Patch Tuesday security updates for May 2022 addressed three ...

EU condemns Russian cyber operations against Ukraine
Pierluigi Paganini May 11, 2022

The European Union condemns the cyberattacks conducted by Russia against Ukraine, which targeted the satellite KA-SAT network. The European Union accused Russia of the cyberattack that hit th ...

Microsoft fixed RCE flaw in a driver used by Azure Synapse and Data Factory
Pierluigi Paganini May 10, 2022

Microsoft disclosed a now-fixed vulnerability in Azure Synapse and Azure Data Factory that could have allowed remote code execution. Microsoft announced to have addressed a critical remote code ex ...

Hacktivists hacked Russian TV schedules during Victory Day and displayed anti-war messages
Pierluigi Paganini May 10, 2022

Hacktivists yesterday defaced the Russian TV with pro-Ukraine messages and took down the RuTube video streaming site. Hacktivists and white hat hackers continue to support Ukraine against the Russ ...

recent articles

Cyber Crime
Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack

Binance reveals how fake job interviews, malware and internal AI abuse enabled attackers to steal $6.34 billion. The Binance security incident on October 29 shows how a fake recruitment process ca ...

Pierluigi Paganini November 03, 2026
Security
Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions

Synology warns of ransomware attacks exploiting a 2024 flaw in outdated NAS devices, urging users to update DSM immediately. A security fix released in 2024 is now at the centre of ransomware atta ...

Pierluigi Paganini November 03, 2026
Malware
Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers

Google dismantled a 1.3 million-device botnet allegedly built by Android TV box maker Videostrong to enable ad fraud and proxy abuse. Google and its partners dismantled a backdoor called XCPE that ...

Pierluigi Paganini November 03, 2026
Laws and regulations
NIS2 Makes Board Members Personally Liable for Access Control Decisions

NIS2 Article 20 makes management bodies answerable for the access controls they approve, and boards are starting to ask for proof that those controls work. NIS2 board accountability gives director ...

Pierluigi Paganini November 03, 2026
Intelligence
Apple’s spyware notifications reach the Bundestag: what the BSI says to do now

Apple warns German Bundestag lawmakers of mercenary spyware attacks; BSI urges victims to assume compromise. The German government is warning politicians and public figures that they were targeted ...

Pierluigi Paganini November 03, 2026
Malware
VOLTA, the infostealer that asks an AI which victims are worth the effort

VOLTA is an AI-powered infostealer that steals personal data, then uses LLMs to assess victims' value and rank targets for attackers. Cisco Talos has analyzed a new Windows infostealer called VOLT ...

Pierluigi Paganini November 02, 2026
Security
New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia

A new wave of fridge cyberattacks hit supermarket refrigeration systems across five European countries, raising temperatures and causing food losses. A new wave of fridge cyberattacks has affected ...

Pierluigi Paganini November 02, 2026
Security
Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens

Hackers reportedly hit Ukraine 's and Russia 's emergency alert apps, sending fake nuclear and attack warnings and raising concerns over public safety. Ukraine and Russia both said on Sunday night ...

Pierluigi Paganini November 02, 2026
Artificial Intelligence
Chainalysis Investigates Security Incident Involving AI-Driven Attack Techniques

Chainalysis suffered a cyberattack exposing customer names, emails and user IDs, while investigation data and passwords remain safe. Blockchain analytics firm Chainalysis says it was the target of ...

Pierluigi Paganini November 02, 2026
APT
FBI Blames North Korea for $6 Billion Binance Crypto Theft

The FBI blames North Korea for stealing $6 billion from Binance and urges crypto firms to block transactions linked to the stolen funds. The FBI has named North Korea as the party behind the theft ...

Pierluigi Paganini November 01, 2026
Artificial Intelligence
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 6

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, ...

Pierluigi Paganini November 01, 2026
Malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 121

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter uCreator: virtualization-based Android s ...

Pierluigi Paganini November 01, 2026
Breaking News
Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini November 01, 2026
Security
SMS of Death: Android under attack, an invisible SMS can block calls and emergency services

SMS of Death lets attackers crash Android call services with a hidden, zero-click message, blocking phone calls, even emergency calls too. A specially manipulated SMS message is enough to crash An ...

Pierluigi Paganini November 01, 2026
Security
U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Age ...

Pierluigi Paganini October 31, 2026
Security
Attackers Exploit Critical Drupal Commerce Core Vulnerability CVE-2026-118539

Drupal warns that attackers are exploiting a critical authorization flaw in Commerce Core, putting vulnerable online stores at risk. Drupal warns that threat actors are exploiting a highly critica ...

Pierluigi Paganini October 31, 2026
Malware
Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries

Yoba malware uses fake ChatGPT and Claude apps to sideload malware through signed installers and deploy a cryptocurrency miner. Check Point Research has spent two months tracking a campaign it cal ...

Pierluigi Paganini October 30, 2026
Security
U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency ...

Pierluigi Paganini October 30, 2026
Cyber Crime
$6.3 Billion Stolen from Binance in Attack Attributed to North Korea

Binance links a $6.3 billion crypto theft to a compromised DevOps laptop, with North Korean hackers blamed by blockchain analysts. Binance was investigating suspicious transfers that early estimat ...

Pierluigi Paganini October 30, 2026
Hacking
How to prioritize remediation after a pentest: a practitioner workflow

A practical pentest workflow combines CVSS, EPSS and business impact to validate findings, prioritize fixes and document remediation decisions. Remediation prioritization after a pentest is the pr ...

Pierluigi Paganini October 30, 2026