LATEST NEWS

VIEW ALL
Hackers compromised APKPure client to distribute infected Apps
Pierluigi Paganini April 10, 2021

APKPure, one of the largest alternative app stores, was the victim of a supply chain attack, threat actors compromised client version 3.17.18 to deliver malware. Multiple security experts discover ...

Crooks abuse website contact forms to deliver IcedID malware
Pierluigi Paganini April 10, 2021

Microsoft researchers spotted a malware campaign abusing contact forms on legitimate websites to deliver the IcedID malware. Security experts from Microsoft have uncovered a malware campaign abusi ...

This man was planning to kill 70% of Internet in a bomb attack against AWS
Pierluigi Paganini April 10, 2021

The FBI arrested a man for allegedly planning a bomb attack against Amazon Web Services (AWS) to kill about 70% of the internet. The FBI arrested Seth Aaron Pendley (28), from Texas, for allegedly ...

Zerodium will pay $300K for WordPress RCE exploits
Pierluigi Paganini April 09, 2021

Zero-day broker Zerodium announced that will triples payouts for remote code execution exploits for the popular WordPress content management system. Zero-day broker Zerodium has tripled the payout ...

recent articles

Cyber Crime
ShinyHunters arrest number three: a Canadian ransomware negotiator

A Canadian ransomware negotiator faces extortion charges in the FBI's ShinyHunters crackdown. Here's what is known, and what isn't. ShinyHunters is the focus of a global FBI investigation, and the ...

Pierluigi Paganini October 12, 2026
Security
Canonical Hit by Second DDoS Attack in 2026, Public Websites Disrupted

Canonical suffered its second DDoS attack this year, disrupting public websites for over four hours while Launchpad and the Snap Store remained online. Ubuntu's parent company Canonical spent part ...

Pierluigi Paganini October 12, 2026
Hacking
SonicWall Patches CVSS 10.0 SSRF Flaw as Attacks Begin

Attackers are exploiting SonicWall SMA 1000 vulnerability, tracked as CVE-2026-102255 (CVSS score of 10.0), just days after its public disclosure. Attackers have begun exploiting a critical flaw i ...

Pierluigi Paganini October 12, 2026
Cyber Crime
CyberXero Used 51 AI Agents to Steal 628,000 Ukrainian Records

CyberXero used 51 AI agents to support cyberattacks, stealing 628,000 Ukrainian records, including sensitive data from energy infrastructure. CyberXero is an operation that combines traditional ha ...

Pierluigi Paganini October 12, 2026
Cyber Crime
GTA 6 Leaker Demands $30M Meme Coin Market Cap to Release Full Game

CyberLeek threatens to leak a playable GTA 6 build if its Solana meme coin hits a $30 million market cap, but the build remains unverified. CyberLeek, the anonymous figure behind this summer’s w ...

Pierluigi Paganini October 12, 2026
Artificial Intelligence
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 3

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, ...

Pierluigi Paganini October 11, 2026
Breaking News
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 118

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter ClingSTUN Linux Backdoor Abuses Public S ...

Pierluigi Paganini October 11, 2026
Malware
Bitdefender finds preinstalled Android malware you can't uninstall, seen in 150 countries

Bitdefender finds Midnight Mimosa, preinstalled Android malware on cheap MediaTek phones that fakes ad clicks, drops apps and builds a proxy botnet. Bitdefender researchers discovered a campaign c ...

Pierluigi Paganini October 11, 2026
Breaking News
Security Affairs newsletter Round 599 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini October 11, 2026
Security
U.S. CISA adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecuri ...

Pierluigi Paganini October 11, 2026
Artificial Intelligence
Anthropic Restricts Live Internet Access After Claude Evaluation Failures

Anthropic’s models kept working around the rules on the live internet. The company published the cases. Anthropic released a report on unintended actions its Claude models took during evaluation ...

Pierluigi Paganini October 10, 2026
Cyber Crime
Silent Ransom Group Allegedly Extorted $207 Million Without Encrypting Files

Silent Ransom Group allegedly extorted $207 million from 27 law firms in six months using phone calls and social engineering, not encryption. Silent Ransom Group doesn’t rely on encryption. No m ...

Pierluigi Paganini October 10, 2026
Cyber Crime
US Sentences Empire Market Co-Creator Over $430 Million Criminal Marketplace

Empire Market co-creator Raheim Hamilton was sentenced to 40 years in prison for running a dark web marketplace linked to $430 million in illegal trades. The case against Empire Market shows how a ...

Pierluigi Paganini October 10, 2026
Uncategorized
Germany Arrests Suspected Qilin Ransomware Leader After Japan Detention

Japan helped extradite a Russian suspect linked to Qilin ransomware to Germany, but the gang continued attacking victims after his arrest. Germany has arrested a Russian national believed to be a ...

Pierluigi Paganini October 09, 2026
Artificial Intelligence
Claude Helps Secure Open Source as Anthropic Offers Free Vulnerability Scanning

Anthropic launches free OSS Scanner, using AI to find open-source vulnerabilities and help maintainers fix bugs before attackers exploit them. Anthropic is launching OSS Scanner, a vulnerability s ...

Pierluigi Paganini October 09, 2026
Security
US Disrupts China-Linked Integrity Tech 's Cyber Espionage Tools

DOJ and FBI seized China-linked hacking tools Microscan and FishHub, linked to Integrity Tech and attacks on critical infrastructure worldwide. The Justice Department and FBI took down two hacking ...

Pierluigi Paganini October 09, 2026
Hacking
AI-Driven tool ARTEX used in attacks against South Korean Banks

CrowdStrike analyzes open directories left by an attacker who used the ARTEX AI pentest tool and LLMs to breach South Korean financial firms. CrowdStrike published a research on a campaign against ...

Pierluigi Paganini October 09, 2026
Cyber warfare
Italy's Foreign Ministry Under Cyberattack as Embassy Sites Come Under Review

Italy's Foreign Ministry is defending its website against a cyberattack, checking embassy sites and pushing for EU action to identify attackers. On the morning of October 8, Italy's Ministry of Fo ...

Pierluigi Paganini October 08, 2026
Cyber Crime
Hunt.io Finds New Infrastructure Of BraZetsu Access Broker Months Before Disclosure

Hunt.io traced BraZetsu 's infrastructure and found that hosting patterns and certificate data remained useful after published IOCs became outdated. Group-IB researchers published a detailed write ...

Pierluigi Paganini October 08, 2026
Cyber Crime
MonsterCloud Owner Charged With Secretly Paying Ransomware Demands

MonsterCloud owner Zohar Pinhasi allegedly paid ransomware demands behind clients’ backs, then charged them millions for the supposed recovery. Zohar Pinhasi, the owner of Florida-based MonsterC ...

Pierluigi Paganini October 08, 2026