LATEST NEWS

VIEW ALL
Dridex banking Trojan campaign exploited Microsoft Word 0day recently revealed
Pierluigi Paganini April 11, 2017

Millions of people were targeted by a phishing campaign exploiting a Microsoft Word 0day and aimed to spread the Dridex Banking Trojan. Recently security experts from firms McAfee and FireEye warn ...

Symantec confirms that Longhorn group is tied to CIA operators detailed in Vault 7
Pierluigi Paganini April 11, 2017

Symantec reportedly linked the CIA hacking tools to several cyber attacks powered over the years by the Longhorn group. Security experts analyzed the alleged CIA hacking tools included in the Vault ...

Alleged Russian hacker arrested in Spain reportedly over US Presidential Election Hack
Pierluigi Paganini April 10, 2017

Spanish law enforcement arrested in Barcellona the Russian hacker Pyotr Levashov who is suspected of being involved in attacks on 2016 US Election. Spanish law enforcement arrested in Barcelona the R ...

How to get admin credentials from TP-Link M5350 3G/Wi-Fi modem with a text message
Pierluigi Paganini April 10, 2017

A German security researcher discovered how to retrieve the admin credentials from a TP-Link M5350 3G/Wi-Fi modem with an evil text message Some bugs are very strange and dangerous, this is the case ...

recent articles

Artificial Intelligence
US Government Orders DeepSeek Out of Federal Civilian Systems

PHP prepares emergency patches for two critical RCE flaws, while older, unsupported versions could remain exposed without vendor fixes. The U.S. government ordered federal civilian agencies to rem ...

Pierluigi Paganini October 21, 2026
Security
PHP Prepares Emergency Fixes for Two Critical Remote Code Execution Flaws

PHP will release emergency fixes for two critical RCE flaws rated 9.2, as researchers warn of potential risks to exposed and unsupported systems. PHP is preparing an emergency security release for ...

Pierluigi Paganini October 21, 2026
Intelligence
NSO Spyware Pegasus Hit a Serbian University Rector Six Days Before Snap Elections

Citizen Lab confirmed Pegasus on a Serbian rector’s iPhone 6 days before elections, raising the known civil society spyware target count to 16. The Citizen Lab published a research note confirmi ...

Pierluigi Paganini October 21, 2026
Data Breach
Nikkei data breach affected over 1.8 million records

Nikkei disclosed a data breach affecting over 1.8 million records after hackers used stolen credentials to access a cloud service for system development. Japanese media company Nikkei has disclose ...

Pierluigi Paganini October 20, 2026
Breaking News
Google Cloud Outage in London Disrupts Revolut Banking Services

Google Cloud's London outage disrupted Revolut payments and ATM withdrawals, while ING Germany reported online banking issues. Multiple Google Cloud services went offline in the London region this ...

Pierluigi Paganini October 20, 2026
Data Breach
AfD Email Breach Exposes 421,000 Messages in Anonymous Online Archive

A data breach exposed AfD emails, while an anonymous site published AI summaries of 421,000 messages, raising questions about authenticity and privacy. Germany's Alternative für Deutschland (AfD) ...

Pierluigi Paganini October 20, 2026
Artificial Intelligence
Microsoft Treats AI Agents as Insider Threats in New Security Framework

Microsoft urges organizations to secure AI Agents as insider threats, using dynamic permissions, continuous risk monitoring and automated containment. Microsoft published a detailed blog post expl ...

Pierluigi Paganini October 20, 2026
Hacking
Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners

Attackers exploit Plex2Shell flaws to install crypto miners and proxy software. Admins should update their Plex Media Server. Plex Media Server is designed to make movies, music, and other media a ...

Pierluigi Paganini October 19, 2026
Artificial Intelligence
Meta wants to scrape your website to train its AI, and you can't say no

Meta wants the right to scrape your website for AI training. If you have a business account, that includes you. At the end of the month, Meta plans to change its commercial terms in a way that mat ...

Pierluigi Paganini October 19, 2026
Uncategorized
Deepfakes and Election Manipulation: UK Watchdog Seeks Faster Detection

The UK Electoral Commission is building an AI system to alert candidates to damaging deepfakes within three hours. The UK's Electoral Commission is building an AI-powered system to tell candidate ...

Pierluigi Paganini October 19, 2026
Hacking
Big Fish: OpenBSD Root Exploit Chains a 37-Year-Old BSD Bug With a Kernel Flaw

OpenBSD flaws, including a 37-year-old BSD bug, enable local attackers to bypass security protections and gain root access. Patches are available. Cybersecurity firm Calif published a full exploit ...

Pierluigi Paganini October 19, 2026
Hacking
Attackers Abuse Stolen ConnectWise Application Credentials to Target Microsoft 365

Attackers stole ConnectWise application credentials to access Microsoft 365 tenants, prompting the company to suspend cloud services. ConnectWise suspended its Cloud Backup service and took both S ...

Pierluigi Paganini October 19, 2026
Security
Japan's SiteGuard WAF flaw CVE-2026-106931 is already being exploited

Attackers are exploiting vulnerability CVE-2026-106931 in SiteGuard Server Edition to run commands as root or SYSTEM. EG Secure Solutions published an urgent alert warning of CVE-2026-106931, an O ...

Pierluigi Paganini October 19, 2026
Internet of Things
16-Year-Old Broadcom Wi-Fi Bug Lets Attackers Take Over Routers Without a Password

A Broadcom Wi-Fi flaw dating back to 2010 allows attackers within Wi-Fi range to execute code on vulnerable routers without authentication. Researcher Quentin Kaiser presented a talk at Hexacon in ...

Pierluigi Paganini October 19, 2026
Artificial Intelligence
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 4

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, ...

Pierluigi Paganini October 18, 2026
Security
Rust-Based CikaBika Bot Turns Discord into a Command Center

CikaBika Bot uses fake documents to infect Windows systems, then abuses Discord and Ngrok to execute commands, spy on victims, and steal files. Darktrace researchers have documented a new campaign ...

Pierluigi Paganini October 18, 2026
Malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 119

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter IronChain Ransomware Threatens Businesse ...

Pierluigi Paganini October 18, 2026
Breaking News
Security Affairs newsletter Round 600 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini October 18, 2026
Intelligence
North Korean IT Workers Used Stolen US Identities to Earn $3 Million

The FBI raided 40 Texas homes over a North Korean scheme that used fake IT workers to target 70 US companies and generate $3 million. The Justice Department (DoJ) announced coordinated enforcement ...

Pierluigi Paganini October 17, 2026
Security
U.S. CISA adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecu ...

Pierluigi Paganini October 17, 2026