MUST READ

Unpatched Check Point Gateways Are Being Wiped exploiting PHP2Shell

 | 

New SignDrop Exploit Can Abuse Windows Defender to Bypass Security Protections

 | 

The School Bomb Threats Came From Accounts Already in Stolen Data

 | 

Microsoft Cloud Outage Hits Outlook, Teams, Copilot and AI Services

 | 

Predator, Pegasus and Graphite: Governments Accused of Spyware Abuse Face Little Accountability

 | 

Zoom Fixes Critical Windows Vulnerability Allowing Privilege Escalation

 | 

Poland takes its national e-government platform offline after a cyberattack

 | 

AI Pentest Tool AntiFox Abused To Steal AWS Credentials

 | 

WhiteArmor Demands $5 Million from Maersk, Claims Theft of 100GB of Data

 | 

Hackers Advertise a $1,000 Gmail Tool That Allegedly Survives Password Resets

 | 

Microsoft November Patch Tuesday: one exploited Outlook bug and 30 wormable flaws

 | 

U.S. CISA adds IBM, SignalWire FreeSwitch, OpenSSH, and GPUStack flaws to its Known Exploited Vulnerabilities catalog

 | 

Russia-Linked APT Turla Turned Exchange Servers Into Their Own Control Room

 | 

iOS Sandbox Escape Is Public, and Apple Hasn't Confirmed a Fix

 | 

Google fixes the eighth actively exploited Chrome zero-day of 2026

 | 

Iris Ohyama data breach may expose personal information of 7.7 million people

 | 

France Blames Iran for the Supermarket Fridge Attacks

 | 

QNAP Warns Users as Plex2Shell Flaws Are Used to Hack NAS Devices

 | 

CISA and the FBI Warn Of Attacks against Industrial Refrigeration Controllers

 | 

Fake GitHub Security Tools Infect Over 2,000 PCs With Malware

 | 

LATEST NEWS

VIEW ALL
Malware
Welcome on board
Pierluigi Paganini November 01, 2011

Welcome on board Welcome! If you are curious, interested in the subject and looking for a place with a few clicks you canbe updated on what happens in the world … well you you’ve fo ...

top articles

Hackers access Booking.com user data, company secures systems
April 13, 2026
Inside ZionSiphon: politically driven malware aims at Israeli water systems
April 17, 2026
RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
April 23, 2026
Checkmarx supply chain attack impacts Bitwarden npm distribution path
April 24, 2026
Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed
April 26, 2026

newsletter

Subscribe to my email list and stay
up-to-date!

most popular

VIEW ALL
Hacking

Unpatched Check Point Gateways Are Being Wiped exploiting PHP2Shell

November 13, 2026

Hacking
New SignDrop Exploit Can Abuse Windows Defender to Bypass Security Protections

November 13, 2026

Security
The School Bomb Threats Came From Accounts Already in Stolen Data

November 12, 2026

Security
Microsoft Cloud Outage Hits Outlook, Teams, Copilot and AI Services

November 12, 2026

Malware
Predator, Pegasus and Graphite: Governments Accused of Spyware Abuse Face Little Accountability

November 12, 2026

recent articles

Hacking
Unpatched Check Point Gateways Are Being Wiped exploiting PHP2Shell

Unpatched Check Point gateways were hacked worldwide, leading to root access, backdoors, network intrusion and destructive wiper attacks. Starting on 30 October, an attacker scanned and exploited ...

Pierluigi Paganini November 13, 2026
Hacking
New SignDrop Exploit Can Abuse Windows Defender to Bypass Security Protections

SignDrop is a Windows zero-day that abuses CLFS security protections to let local attackers gain SYSTEM privileges and bypass defenses. The researcher Chaotic Eclipse, also known as INFINITE NIGH ...

Pierluigi Paganini November 13, 2026
Security
The School Bomb Threats Came From Accounts Already in Stolen Data

Hudson Rock researchers found that two university addresses tied to Italy's school bomb threats were in infostealer data. On 11 November, bomb-threat emails hit schools across Europe. ANSA, citing ...

Pierluigi Paganini November 12, 2026
Security
Microsoft Cloud Outage Hits Outlook, Teams, Copilot and AI Services

A Microsoft outage disrupted Outlook, Teams and Copilot, also breaking OpenAI and Anthropic connectors to Microsoft 365 accounts. Microsoft 365, Outlook and Teams went down for thousands of US use ...

Pierluigi Paganini November 12, 2026
Malware
Predator, Pegasus and Graphite: Governments Accused of Spyware Abuse Face Little Accountability

Europe's spyware victims face years of legal battles and few answers as governments shield surveillance behind national security. Greek journalist Thanasis Koukakis waited almost five years for a ...

Pierluigi Paganini November 12, 2026
Security
Zoom Fixes Critical Windows Vulnerability Allowing Privilege Escalation

Zoom fixes two Windows Workplace flaws, including a critical bug that could let unauthenticated attackers remotely escalate privileges. Zoom has released security updates to fix two vulnerabilitie ...

Pierluigi Paganini November 12, 2026
Security
Poland takes its national e-government platform offline after a cyberattack

Poland takes its e-government platform ePUAP offline after stopping a cyberattack, disrupting access to public services. Poland temporarily shut down ePUAP, the government platform citizens and bu ...

Pierluigi Paganini November 12, 2026
Hacking
AI Pentest Tool AntiFox Abused To Steal AWS Credentials

Arctic Wolf saw attackers use the AntiFox pentest platform to hit IIS servers and AWS accounts. Arctic Wolf Labs has published research on attackers using AntiFox, an open-source, Chinese-language ...

Pierluigi Paganini November 11, 2026
Data Breach
WhiteArmor Demands $5 Million from Maersk, Claims Theft of 100GB of Data

Maersk confirms a data breach involving a legacy system, while WhiteArmor claims 100GB of stolen data and demands a $5 million ransom. A.P. Moller Maersk, the Danish shipping giant, says it identi ...

Pierluigi Paganini November 11, 2026
Malware
Hackers Advertise a $1,000 Gmail Tool That Allegedly Survives Password Resets

Hackers advertise a $1,000-a-month tool claiming persistent Gmail access after password resets, but its effectiveness remains unverified. A developer of hacking tools is selling a $1,000 per month ...

Pierluigi Paganini November 11, 2026
Hacking
Microsoft November Patch Tuesday: one exploited Outlook bug and 30 wormable flaws

Microsoft November Patch Tuesday security updates fix 1,090 flaws, including one exploited Outlook bug and 30 potentially wormable issues. Microsoft November Patch Tuesday addressed about 1,090 ne ...

Pierluigi Paganini November 11, 2026
Hacking
U.S. CISA adds IBM, SignalWire FreeSwitch, OpenSSH, and GPUStack flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds IBM, SignalWire FreeSwitch, OpenSSH, and GPUStack flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity an ...

Pierluigi Paganini November 10, 2026
APT
Russia-Linked APT Turla Turned Exchange Servers Into Their Own Control Room

ESET found Russia-Linked APT group Turla using a new toolset, dubbed Cereal, on government Exchange servers in Kazakhstan and Romania. ESET Research detailed a previously undocumented toolset it ...

Pierluigi Paganini November 10, 2026
Hacking
iOS Sandbox Escape Is Public, and Apple Hasn't Confirmed a Fix

A public iOS sandbox escape could expose wallet keys, Binance warns. No attacks are reported and no fix is confirmed. On 10 November, Binance warned users about a public iOS sandbox escape that le ...

Pierluigi Paganini November 10, 2026
Breaking News
Google fixes the eighth actively exploited Chrome zero-day of 2026

Google patched nine Chrome flaws, including a V8 vulnerability tracked as CVE-2026-125350, that attackers have been actively exploiting in the wild. Google has addressed multiple security vulnerab ...

Pierluigi Paganini November 10, 2026
Data Breach
Iris Ohyama data breach may expose personal information of 7.7 million people

Iris Ohyama warns that a cloud data breach may have exposed personal information of 7.7 million customers, including names and passwords. Japanese household goods manufacturer Iris Ohyama has disc ...

Pierluigi Paganini November 10, 2026
Hacking
France Blames Iran for the Supermarket Fridge Attacks

France blames Iran for supermarket fridge attacks. What’s known, what remains unclear, and how to secure exposed controllers. French Foreign Minister Jean-Noël Barrot said Iran’s Revolutionar ...

Pierluigi Paganini November 09, 2026
Cyber Crime
QNAP Warns Users as Plex2Shell Flaws Are Used to Hack NAS Devices

Taiwanese vendor QNAP urges users to update Plex Media Server after reports of NAS compromises through the Plex2Shell vulnerability chain. QNAP urges users to update Plex Media Server through the ...

Pierluigi Paganini November 09, 2026
Hacking
CISA and the FBI Warn Of Attacks against Industrial Refrigeration Controllers

US agencies warn attackers are going after industrial refrigeration controllers. The fixes are basic, and most start with getting them off the internet. CISA, the FBI, HHS, USDA and the Department ...

Pierluigi Paganini November 09, 2026
Malware
Fake GitHub Security Tools Infect Over 2,000 PCs With Malware

Fake GitHub security tools are spreading malware that disables defenses, steals sensitive data and infects over 2,000 PCs. Cybersecurity firm Doctor Web has found malware hidden in GitHub projects ...

Pierluigi Paganini November 09, 2026