LATEST NEWS

VIEW ALL
F5 Patches Critical NGINX Vulnerabilities Enabling Unauthenticated Code Execution
Pierluigi Paganini June 18, 2026

F5 released emergency updates for critical NGINX flaws (CVE-2026-42530, CVE-2026-42055) that could enable unauthenticated code execution. F5 has issued out-of-band patches for multiple NGINX vulne ...

Microsoft Confirms RoguePlanet Zero-Day in Defender, Patch Under Development
Pierluigi Paganini June 18, 2026

Microsoft confirmed the RoguePlanet Defender zero-day (CVE-2026-50656), a privilege escalation flaw, and is developing a security patch. Microsoft has acknowledged the RoguePlanet zero-day affecti ...

FortiBleed Exposes Admin Passwords for 75,000 Fortinet Firewalls
Pierluigi Paganini June 18, 2026

FortiBleed: Admin Passwords for 75,000 Fortinet Firewalls Are Out in the Wild. Half the Internet-Facing Fortinets on the Planet. Security researcher Bob Diachenko found a server sitting open on th ...

DragonForce Hid Inside Microsoft Teams and Nobody Noticed for Two Months
Pierluigi Paganini June 17, 2026

DragonForce hid for months by routing malware traffic through Microsoft Teams infrastructure, masking C2 activity and evading network detection. DragonForce ransomware operators hit a major U.S. s ...

recent articles

Hacking
France Blames Iran for the Supermarket Fridge Attacks

France blames Iran for supermarket fridge attacks. What’s known, what remains unclear, and how to secure exposed controllers. French Foreign Minister Jean-Noël Barrot said Iran’s Revolutionar ...

Pierluigi Paganini November 09, 2026
Cyber Crime
QNAP Warns Users as Plex2Shell Flaws Are Used to Hack NAS Devices

Taiwanese vendor QNAP urges users to update Plex Media Server after reports of NAS compromises through the Plex2Shell vulnerability chain. QNAP urges users to update Plex Media Server through the ...

Pierluigi Paganini November 09, 2026
Hacking
CISA and the FBI Warn Of Attacks against Industrial Refrigeration Controllers

US agencies warn attackers are going after industrial refrigeration controllers. The fixes are basic, and most start with getting them off the internet. CISA, the FBI, HHS, USDA and the Department ...

Pierluigi Paganini November 09, 2026
Malware
Fake GitHub Security Tools Infect Over 2,000 PCs With Malware

Fake GitHub security tools are spreading malware that disables defenses, steals sensitive data and infects over 2,000 PCs. Cybersecurity firm Doctor Web has found malware hidden in GitHub projects ...

Pierluigi Paganini November 09, 2026
Cyber warfare
The BBC has a plan for a Black Sky event, and it runs on FM radio

The BBC plans to use emergency FM radio to keep the UK informed during prolonged blackouts, with a self-sufficient studio ready for 72 hours. If electricity fails across the UK for days, the BBC s ...

Pierluigi Paganini November 09, 2026
Cyber Crime
Don’t Hand Propaganda a Gift: Reading the Brenner Base Tunnel SE Breach Calmly

Brenner Base Tunnel SE confirms a breach and Everest claims 812 GB. What we know, what we don’t, and why overblown alarm helps propaganda more than the attackers. Brenner Base Tunnel (BBT) SE, t ...

Pierluigi Paganini November 08, 2026
Artificial Intelligence
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 7

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, ...

Pierluigi Paganini November 08, 2026
Malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 122

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Unknown APT uses NetamLoader to attack a ...

Pierluigi Paganini November 08, 2026
Security
Security Affairs newsletter Round 603 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini November 08, 2026
Cyber Crime
Attackers Exploit Third-Party Provider to Raid French Bank Crédit Mutuel Arkéa

French Bank Crédit Mutuel Arkéa says hackers exploited a service provider to steal up to $133 million using the bank’s own account. French cooperative bank Crédit Mutuel Arkéa was hit by a c ...

Pierluigi Paganini November 08, 2026
Artificial Intelligence
Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches

Hunt.io traced ARTEX servers and AI-powered hacking tools used in breaches affecting seven South Korean financial institutions. Between late September and early October 2026, seven South Korean fi ...

Pierluigi Paganini November 07, 2026
Artificial Intelligence
One Product Isn't the Problem: Monetizing an AI Portfolio Without Confusing Your Customers

Software vendors can boost revenue by tracking customer usage across products, while AI accelerates pricing and consumption decisions. It is hard to find any software vendor that sells just one pr ...

Pierluigi Paganini November 07, 2026
Security
U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds SonicWall SonicOS SSLVPN vulnerability CVE-2026-19868 to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Sonic ...

Pierluigi Paganini November 07, 2026
Security
White House Network Appears in Global Residential Proxy Traffic

Layer3 found residential proxy traffic using the White House network, raising concerns about potential exposure of internal systems. Layer3 Intel says it found residential proxy traffic leaving th ...

Pierluigi Paganini November 06, 2026
Artificial Intelligence
OpenAI Rates GPT-6 Cyber Critical After Major Vulnerability Discoveries

OpenAI GPT-6 Cyber found 81 high-severity Firefox flaws and hundreds of Linux bugs, raising new questions about AI-powered cyber risks. OpenAI has introduced GPT-6 Cyber, a model built for securit ...

Pierluigi Paganini November 06, 2026
Security
ENISA Warns of Cyberattacks Targeting Refrigeration Systems Across Europe

ENISA warns of cyberattacks on European refrigeration systems, exposing risks to supermarkets, food supplies and industrial controls. The European Union has issued a coordinated cybersecurity warn ...

Pierluigi Paganini November 06, 2026
Artificial Intelligence
OpenAI Reports Covert Underperformance in GPT-6 Astra

OpenAI says GPT-6 Astra sometimes secretly underperformed on safety research, raising concerns about AI reliability and alignment. OpenAI has disclosed that its GPT-6 Astra model sometimes quietly ...

Pierluigi Paganini November 06, 2026
Security
UNM Health Shuts Clinics and Diverts Patients During Security Incident

A cybersecurity incident forced UNM Health to divert ambulances, cancel appointments, and pause care while it contained the threat. On Monday, October 26, the University of New Mexico Health Syste ...

Pierluigi Paganini November 05, 2026
APT
Russian APT29 Targets Mobile Users with Watering Hole Attacks

Russia-linked group APT29 targeted iOS and Android users through hijacked websites and a compromised analytics service. Sekoia says a large-scale watering hole campaign is going after iOS and Andr ...

Pierluigi Paganini November 05, 2026
Hacking
U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adde ...

Pierluigi Paganini November 05, 2026