MUST READ

What an LLM Can Find: A Practical, Cheap Path to Code-level Threat Discovery

 | 

Anthropic Finds Claude Breached Real Companies During Security Evaluations

 | 

SilverFox Targets Japanese Manufacturer With Advanced ValleyRAT Campaign

 | 

Why brand impersonation is becoming an initial access vector

 | 

Cybercriminals Are Leveraging Autonomous AI Offensive Security Agents

 | 

Analog Devices Discloses Data Breach After Unauthorized System Access

 | 

FCC Restricts New Foreign Robots and Inverters Over Security Risks

 | 

U.S. CISA adds a Cisco Secure Firewall Management Center (FMC) flaw to its Known Exploited Vulnerabilities catalog

 | 

eSIM Plus and Nicegram Share Belarus-Linked Codebase, Analysis Finds

 | 

Claude Mythos Shows AI Can Outpace Human Cryptography Research

 | 

Hackers Strike Minnesota Water Utilities, One Plant Briefly Offline

 | 

ShinyHunters Claims Ernst & Young Data Breach, Threatens to Leak Stolen Data

 | 

Broadcom Patches Critical VMware ESXi Vulnerability Enabling Host Code Execution

 | 

OpenAI AI Model Used JFrog Artifactory Zero-Day Before Hugging Face Breach

 | 

OpenAI's Rogue AI Agent Breached Second Company, Report Says

 | 

VPN Breach Exposes 58 Million Connection Logs Despite "No-Logs" Claims

 | 

Dysphoria Botnet Uses Blockchain Domains to Hide C2 Infrastructure

 | 

JetBrains Patches Critical TeamCity Flaw Allowing Server Takeover

 | 

New Crypter-as-a-Service Cruciferra Fuels Stealthy Malware Attacks Worldwide

 | 

U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog

 | 

LATEST NEWS

VIEW ALL
Artificial Intelligence
What an LLM Can Find: A Practical, Cheap Path to Code-level Threat Discovery
Pierluigi Paganini July 31, 2026

An AI-assisted audit found 29 flaws in GlobaLeaks, showing LLMs make large-scale code reviews faster, cheaper, and accessible. GlobaLeaks, a mature whistleblowing platform that had already undergo ...

Security
Anthropic Finds Claude Breached Real Companies During Security Evaluations
Pierluigi Paganini July 31, 2026

Anthropic says a misconfigured test let Claude access three real organizations, prompting tighter AI evaluation and monitoring controls. Anthropic disclosed that Claude models had accessed the rea ...

APT
SilverFox Targets Japanese Manufacturer With Advanced ValleyRAT Campaign
Pierluigi Paganini July 31, 2026

SilverFox targeted a Japanese manufacturer with new DLL sideloading techniques, kernel drivers, and resilient ValleyRAT persistence mechanisms. Cato CTRL documented a new SilverFox campaign target ...

Malware
Researchers Expose Flying Eagle Criminal Ecosystem Behind Fake Chinese Police App
Pierluigi Paganini July 30, 2026

Researchers linked the Flying Eagle Android RAT to fake police apps, uncovering 170 servers in a growing cybercrime ecosystem. Hunt.io researchers and independent journalist NetAskari started with ...

top articles

Hackers access Booking.com user data, company secures systems
April 13, 2026
Inside ZionSiphon: politically driven malware aims at Israeli water systems
April 17, 2026
RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
April 23, 2026
Checkmarx supply chain attack impacts Bitwarden npm distribution path
April 24, 2026
Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed
April 26, 2026

newsletter

Subscribe to my email list and stay
up-to-date!

most popular

VIEW ALL
Artificial Intelligence

What an LLM Can Find: A Practical, Cheap Path to Code-level Threat Discovery

July 31, 2026

Security
Anthropic Finds Claude Breached Real Companies During Security Evaluations

July 31, 2026

APT
SilverFox Targets Japanese Manufacturer With Advanced ValleyRAT Campaign

July 31, 2026

Hacking
Why brand impersonation is becoming an initial access vector

July 30, 2026

Artificial Intelligence
Cybercriminals Are Leveraging Autonomous AI Offensive Security Agents

July 30, 2026

recent articles

Artificial Intelligence
What an LLM Can Find: A Practical, Cheap Path to Code-level Threat Discovery

An AI-assisted audit found 29 flaws in GlobaLeaks, showing LLMs make large-scale code reviews faster, cheaper, and accessible. GlobaLeaks, a mature whistleblowing platform that had already undergo ...

Pierluigi Paganini July 31, 2026
Security
Anthropic Finds Claude Breached Real Companies During Security Evaluations

Anthropic says a misconfigured test let Claude access three real organizations, prompting tighter AI evaluation and monitoring controls. Anthropic disclosed that Claude models had accessed the rea ...

Pierluigi Paganini July 31, 2026
APT
SilverFox Targets Japanese Manufacturer With Advanced ValleyRAT Campaign

SilverFox targeted a Japanese manufacturer with new DLL sideloading techniques, kernel drivers, and resilient ValleyRAT persistence mechanisms. Cato CTRL documented a new SilverFox campaign target ...

Pierluigi Paganini July 31, 2026
Hacking
Why brand impersonation is becoming an initial access vector

Brand impersonation now drives initial access, using fake sites and apps to deliver malware, making rapid takedowns essential to disrupt attacks. Attackers recently poisoned more than 700 websites ...

Pierluigi Paganini July 30, 2026
Artificial Intelligence
Cybercriminals Are Leveraging Autonomous AI Offensive Security Agents

Resecurity warns AI offensive agents are lowering hacking barriers, fueling an AI-driven race between attackers and defenders. Resecurity analyzed how autonomous offensive security agents such as ...

Pierluigi Paganini July 30, 2026
Data Breach
Analog Devices Discloses Data Breach After Unauthorized System Access

Chipmaker Analog Devices disclosed a data breach after detecting unauthorized access to systems on June 23. The investigation is ongoing. Semiconductor giant Analog Devices (ADI) disclosed a data ...

Pierluigi Paganini July 30, 2026
Security
FCC Restricts New Foreign Robots and Inverters Over Security Risks

The FCC added foreign robots and power inverters to its Covered List, while allowing security updates for existing authorized devices until 2029. The FCC just widened its Covered List again, this ...

Pierluigi Paganini July 30, 2026
Security
U.S. CISA adds a Cisco Secure Firewall Management Center (FMC) flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Cisco Secure Firewall Management Center (FMC) flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and In ...

Pierluigi Paganini July 30, 2026
Security
eSIM Plus and Nicegram Share Belarus-Linked Codebase, Analysis Finds

Analysis found eSIM Plus and Nicegram share a Belarus-linked codebase, while eSIM Plus routes data and calls through Russian services. Two popular apps available in EU app stores, Nicegram, with o ...

Pierluigi Paganini July 30, 2026
Artificial Intelligence
Claude Mythos Shows AI Can Outpace Human Cryptography Research

Claude Mythos found new flaws in HAWK and reduced AES, proving AI can autonomously advance cryptography research. Anthropic published two cryptographic research results achieved by Claude Mythos P ...

Pierluigi Paganini July 29, 2026
Hacking
Hackers Strike Minnesota Water Utilities, One Plant Briefly Offline

Coordinated OT cyberattacks hit 30+ Minnesota water utilities, briefly disrupting one plant. Backup procedures prevented major water service impacts. Minnesota just had its own live-fire lesson in ...

Pierluigi Paganini July 29, 2026
Data Breach
ShinyHunters Claims Ernst & Young Data Breach, Threatens to Leak Stolen Data

ShinyHunters claimed the Ernst & Young data breach, threatening to leak stolen tax records unless the firm contacts the group by July 31. The ShinyHunters cybercrime group has taken responsibi ...

Pierluigi Paganini July 29, 2026
Security
Broadcom Patches Critical VMware ESXi Vulnerability Enabling Host Code Execution

Broadcom patched a critical VMware ESXi VM escape flaw (CVE-2026-47876) that could let attackers run code on the host from a compromised virtual machine. Broadcom has released patches to address f ...

Pierluigi Paganini July 29, 2026
Hacking
OpenAI AI Model Used JFrog Artifactory Zero-Day Before Hugging Face Breach

OpenAI confirmed its AI exploited an Artifactory zero-day to escape its test environment before breaching Hugging Face. Two weeks after Hugging Face disclosed an autonomous AI system had breached ...

Pierluigi Paganini July 29, 2026
Artificial Intelligence
OpenAI's Rogue AI Agent Breached Second Company, Report Says

Reuters says OpenAI's rogue AI agent also breached a Modal customer, exposing a wider attack and raising fresh concerns over autonomous AI safety. Reuters reported that the OpenAI agent that hack ...

Pierluigi Paganini July 29, 2026
Security
VPN Breach Exposes 58 Million Connection Logs Despite "No-Logs" Claims

A breached "no-logs" VPN exposed 58 million connection logs and millions of user, device, and payment records, contradicting its privacy claims. A threat actor on the Altenen cybercrime forum is d ...

Pierluigi Paganini July 29, 2026
Malware
Dysphoria Botnet Uses Blockchain Domains to Hide C2 Infrastructure

Researchers uncovered the 200,000-device Dysphoria botnet, which uses Ethereum and Solana domains to hide its command servers. QiAnXin XLab, jointly with China's CNCERT, disclosed Dysphoria, a bot ...

Pierluigi Paganini July 28, 2026
Security
JetBrains Patches Critical TeamCity Flaw Allowing Server Takeover

JetBrains patched a critical TeamCity flaw (CVE-2026-63077) enabling unauthenticated code execution on affected on-premise servers. JetBrains has released security updates for TeamCity On-Premises ...

Pierluigi Paganini July 28, 2026
Malware
New Crypter-as-a-Service Cruciferra Fuels Stealthy Malware Attacks Worldwide

Proofpoint uncovered Cruciferra, a crypter-as-a-service that helps hackers evade antivirus and deliver malware in multiple campaigns. Proofpoint's research team traced a wave of income-tax-themed ...

Pierluigi Paganini July 28, 2026
Security
U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity an ...

Pierluigi Paganini July 28, 2026