MUST READ

FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure

 | 

U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog

 | 

88 ID Verification Breaches Show the Cost of Collecting Identity Data

 | 

WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion

 | 

Operation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global Scams

 | 

Norway ’s Digital Government Infrastructure Hit by a new DDoS Attack

 | 

Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable

 | 

U.S. CISA adds maximum-severity Oracle flaw to its Known Exploited Vulnerabilities catalog

 | 

Fake Minecraft Sites Are Still Spreading WeedHack After C2 Takedown

 | 

Cybercriminals Turn GTA VI Leaks Into Malware Bait

 | 

TikTok Settles U.S. Child Privacy Case for $400 Million

 | 

iAuthFlow v2: The $10,000 Phishing Toolkit That Survives Your Password Reset

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 111

 | 

UK Power Plant Disabled for Four Days by Iran-Linked Hackers, Concurrent with US Water Attacks

 | 

Security Affairs newsletter Round 591 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

Zero-Click Grok Chat History Theft: Adversa AI Demonstrates Cryptographic Context Injection

 | 

Malware Hijacks Android Car Head Units

 | 

U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog

 | 

Your Shredded Visa Card May Still Work at the Checkout

 | 

Six Maximum-Severity Flaws Found in Cisco Products

 | 

LATEST NEWS

VIEW ALL
Cyber Crime
Operation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global Scams
Pierluigi Paganini August 26, 2026

INTERPOL’s Operation Jackal IV made 58 arrests and exposed global networks laundering money from scams, fraud and sextortion. INTERPOL announced that Operation Jackal IV, running from November 2 ...

Cyber warfare
Norway ’s Digital Government Infrastructure Hit by a new DDoS Attack
Pierluigi Paganini August 25, 2026

Norway ’s shared government infrastructure suffered a third DDoS attack, disrupting digital services but showing no signs of data compromise. Norway 's shared digital government infrastructure h ...

Laws and regulations
When the Algorithm Fires You: Uber Faces €825M Fine
Pierluigi Paganini August 25, 2026

Uber faces an €825M GDPR fine for automatically suspending drivers without human review, highlighting the risks of AI decisions affecting workers. The Dutch Data Protection Authority handed Uber ...

Security
Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable
Pierluigi Paganini August 25, 2026

Two CVSS 9.8 miniOrange SAML WordPress plugin auth bypasses were exploited while paid editions never appeared in any vulnerability database. Manual patch required. Two critical authentication bypa ...

top articles

Hackers access Booking.com user data, company secures systems
April 13, 2026
Inside ZionSiphon: politically driven malware aims at Israeli water systems
April 17, 2026
RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
April 23, 2026
Checkmarx supply chain attack impacts Bitwarden npm distribution path
April 24, 2026
Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed
April 26, 2026

newsletter

Subscribe to my email list and stay
up-to-date!

most popular

VIEW ALL
APT

FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure

August 26, 2026

Security
U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog

August 26, 2026

Reports
88 ID Verification Breaches Show the Cost of Collecting Identity Data

August 26, 2026

Security
WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion

August 26, 2026

Cyber Crime
Operation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global Scams

August 26, 2026

recent articles

APT
FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure

FBI seizes QScan and QTRouter, China-linked platforms used to hide intrusions and target U.S. critical infrastructure. The U.S. Department of Justice and the FBI have seized two platforms, QScan a ...

Pierluigi Paganini August 26, 2026
Security
U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Gitea flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added ...

Pierluigi Paganini August 26, 2026
Reports
88 ID Verification Breaches Show the Cost of Collecting Identity Data

88 ID-verification breaches exposed billions of records, highlighting the growing risks of collecting sensitive identity and biometric data. A new report from Mysterium VPN compiles 88 documented ...

Pierluigi Paganini August 26, 2026
Security
WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion

WhatsApp says 1 billion users now use passkeys, while stronger two-step verification and caller context add new layers of account protection. WhatsApp has reached a significant security milestone: ...

Pierluigi Paganini August 26, 2026
Cyber Crime
Operation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global Scams

INTERPOL’s Operation Jackal IV made 58 arrests and exposed global networks laundering money from scams, fraud and sextortion. INTERPOL announced that Operation Jackal IV, running from November 2 ...

Pierluigi Paganini August 26, 2026
Cyber warfare
Norway ’s Digital Government Infrastructure Hit by a new DDoS Attack

Norway ’s shared government infrastructure suffered a third DDoS attack, disrupting digital services but showing no signs of data compromise. Norway 's shared digital government infrastructure h ...

Pierluigi Paganini August 25, 2026
Security
Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable

Two CVSS 9.8 miniOrange SAML WordPress plugin auth bypasses were exploited while paid editions never appeared in any vulnerability database. Manual patch required. Two critical authentication bypa ...

Pierluigi Paganini August 25, 2026
Security
U.S. CISA adds maximum-severity Oracle flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Oracle flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adde ...

Pierluigi Paganini August 25, 2026
Malware
Fake Minecraft Sites Are Still Spreading WeedHack After C2 Takedown

WeedHack Minecraft Malware Survives C2 Takedown: Fake Client Sites Still Active, SEO Poisoning Puts Malicious Downloads at the Top of Google McAfee Labs published a follow-up report on the WeedHac ...

Pierluigi Paganini August 25, 2026
Malware
Cybercriminals Turn GTA VI Leaks Into Malware Bait

A fake 113GB GTA VI build is packed with malware, using massive empty files to hide a tiny malicious payload. GTA VI hype has reached the point where people are volunteering to infect their own co ...

Pierluigi Paganini August 24, 2026
Laws and regulations
TikTok Settles U.S. Child Privacy Case for $400 Million

TikTok will pay $400 million to settle U.S. claims that it violated child privacy laws by collecting data from users under 13. The U.S. Department of Justice announced that TikTok will pay $400 mi ...

Pierluigi Paganini August 24, 2026
Cyber Crime
iAuthFlow v2: The $10,000 Phishing Toolkit That Survives Your Password Reset

iAuthFlow v2 phishing toolkit uses a phished Google session to enroll an attacker-controlled passkey that survives password resets. Abnormal Security researchers have published an analysis of iAut ...

Pierluigi Paganini August 24, 2026
Security
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 111

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Akira Hits Safe Mode: Ransomware Rebooti ...

Pierluigi Paganini August 23, 2026
Cyber warfare
UK Power Plant Disabled for Four Days by Iran-Linked Hackers, Concurrent with US Water Attacks

Iran-linked hackers shut down a UK power plant for four days in the first confirmed attack of its kind, concurrent with water infrastructure attacks across 12 US states. Iran-linked hackers shut d ...

Pierluigi Paganini August 23, 2026
Breaking News
Security Affairs newsletter Round 591 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini August 23, 2026
Hacking
Zero-Click Grok Chat History Theft: Adversa AI Demonstrates Cryptographic Context Injection

New Cryptographic Context Injection technique bypasses AI guardrails via AES-encrypted payloads, leaking full Grok chat histories zero-click Adversa AI researcher Rony Utevsky devised a new attack ...

Pierluigi Paganini August 23, 2026
Hacking
Malware Hijacks Android Car Head Units

Malware is abusing car infotainment updates to install proxy software, turning Android head units into nodes for the BADBOX network. Kaspersky researchers found something in June 2026 that made th ...

Pierluigi Paganini August 22, 2026
Security
U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Se ...

Pierluigi Paganini August 22, 2026
Hacking
Your Shredded Visa Card May Still Work at the Checkout

UMass Amherst researchers showed expired Visa contactless cards can make real purchases by exploiting an unsigned expiry field in Visa's EMV kernel. Researchers at the University of Massachusetts ...

Pierluigi Paganini August 21, 2026
Security
Six Maximum-Severity Flaws Found in Cisco Products

Cisco patched nine critical flaws, including six rated CVSS 10.0, found during internal testing. None are known to be exploited. Cisco released another batch of security fixes for its Crosswork pl ...

Pierluigi Paganini August 21, 2026