LATEST NEWS

VIEW ALL
CVE-2016-4171 - Another Flash Zero-Day exploited in targeted attacks
Pierluigi Paganini June 15, 2016

Adobe states that the Flash Player zero-day vulnerability (CVE-2016-4171) has been exploited in targeted attacks. It will be fixed later this week. Once again Adobe Flash Player is the target of hac ...

Hack the Pentagon, hackers already found more than 100 flaws
Pierluigi Paganini June 14, 2016

Hackers contracted by the DoD under the Hack the Pentagon initiative have found more than 100 vulnerabilities exceeding Government's expectations. Do you remember the 'Hack the Pentagon' initiative? ...

Watch out, FLocker Ransomware targets Android smart TVs
Pierluigi Paganini June 14, 2016

The day has come, Sharp and Philips smart TV running the Android TV OS could be infected by a ransomware dubbed FLocker ransomware. When a journalist asked me which is a possible evolution of rans ...

Crooks can clone payments cards with a hi-tech contactless device
Pierluigi Paganini June 14, 2016

Cyber criminals are offering for sale a hi-tech gadget named Contactless Infusion X5t to scan nearby contactless payment cards and clone them. The British Daily Mail published an interesting article ...

recent articles

Hacking
OpenAI AI Model Used JFrog Artifactory Zero-Day Before Hugging Face Breach

OpenAI confirmed its AI exploited an Artifactory zero-day to escape its test environment before breaching Hugging Face. Two weeks after Hugging Face disclosed an autonomous AI system had breached ...

Pierluigi Paganini July 29, 2026
Artificial Intelligence
OpenAI's Rogue AI Agent Breached Second Company, Report Says

Reuters says OpenAI's rogue AI agent also breached a Modal customer, exposing a wider attack and raising fresh concerns over autonomous AI safety. Reuters reported that the OpenAI agent that hack ...

Pierluigi Paganini July 29, 2026
Security
VPN Breach Exposes 58 Million Connection Logs Despite "No-Logs" Claims

A breached "no-logs" VPN exposed 58 million connection logs and millions of user, device, and payment records, contradicting its privacy claims. A threat actor on the Altenen cybercrime forum is d ...

Pierluigi Paganini July 29, 2026
Malware
Dysphoria Botnet Uses Blockchain Domains to Hide C2 Infrastructure

Researchers uncovered the 200,000-device Dysphoria botnet, which uses Ethereum and Solana domains to hide its command servers. QiAnXin XLab, jointly with China's CNCERT, disclosed Dysphoria, a bot ...

Pierluigi Paganini July 28, 2026
Security
JetBrains Patches Critical TeamCity Flaw Allowing Server Takeover

JetBrains patched a critical TeamCity flaw (CVE-2026-63077) enabling unauthenticated code execution on affected on-premise servers. JetBrains has released security updates for TeamCity On-Premises ...

Pierluigi Paganini July 28, 2026
Malware
New Crypter-as-a-Service Cruciferra Fuels Stealthy Malware Attacks Worldwide

Proofpoint uncovered Cruciferra, a crypter-as-a-service that helps hackers evade antivirus and deliver malware in multiple campaigns. Proofpoint's research team traced a wave of income-tax-themed ...

Pierluigi Paganini July 28, 2026
Security
U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity an ...

Pierluigi Paganini July 28, 2026
Artificial Intelligence
Reuters: OpenAI Agent Hacked Hugging Face for Days Before Being Detected

Reuters says OpenAI failed to detect its AI agent hacking Hugging Face for days, discovering the breach only after FBI involvement. Reuters reported that the OpenAI agent responsible for the Huggi ...

Pierluigi Paganini July 27, 2026
Malware
MedusaHVNC Trojan Creates Hidden Desktops to Hijack Browsers and Steal Data

MedusaHVNC RAT uses hidden Windows desktops to remotely control browsers, steal data, and evade detection through legitimate system features. Windows has always supported hidden desktops as a legi ...

Pierluigi Paganini July 27, 2026
Data Breach
DentaQuest disclosed a data breach that impacted +23 million individuals

DentaQuest disclosed a data breach that may have exposed the personal and dental health information of more than 23 million people. DentaQuest is notifying more than 23 million people of a data br ...

Pierluigi Paganini July 27, 2026
Hacking
GitLab Users Urged to Patch After Research Reveals Critical RCE Chain

Researchers chained two Oj parser bugs to achieve GitLab RCE via Jupyter notebook diffs, affecting authenticated users on unpatched versions. Depthfirst researchers published a working remote code ...

Pierluigi Paganini July 27, 2026
Security
EFF: Most Smart Wearables Still Fall Short on Privacy and Transparency

EFF says most smart wearables lack basic privacy protections, with Apple standing out for end-to-end encryption and transparency. Most smart wearables still treat privacy like an optional extra, a ...

Pierluigi Paganini July 27, 2026
Security
LockBit5 and Qilin Lead Ransomware Attacks Against Italian Organizations

A new report links 148 ransomware attacks to Italian organizations in H1 2026, with manufacturing the most targeted sector. Six months, 148 confirmed ransomware claims against Italian targets, and ...

Pierluigi Paganini July 27, 2026
Malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 107

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter UAC-0145 Primary Compromise Vectors as o ...

Pierluigi Paganini July 26, 2026
Security
Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Credentials

Hackers compromised hotel Wi-Fi gateways to redirect users to fake Microsoft 365 login pages and steal credentials. ReliaQuest's threat research team just documented attackers compromising the Wi- ...

Pierluigi Paganini July 26, 2026
Security
Security Affairs newsletter Round 587 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini July 26, 2026
APT
Iran-Linked Actors Breach Are Targeting US Water and Energy Control Systems

US agencies warn Iran-linked actors are targeting internet-exposed water and energy control systems, risking disruption. Federal agencies updated their cybersecurity advisory this week: Iran-linke ...

Pierluigi Paganini July 25, 2026
Data Breach
Australian energy provider Origin Energy disclosed a data breach impacting customer data

Origin Energy confirmed a data breach after a hacker claimed to have stolen data from 2 million customers and threatened to leak it. Origin Energy disclosed a cyberattack that exposed customer dat ...

Pierluigi Paganini July 25, 2026
Laws and regulations
Google Fined €890M Under EU Digital Markets Act Over Search and Play Store Practices

EU fined Google €890M under the DMA for favoring its own services and restricting Play Store competition, with AI search features also under scrutiny. The European Commission hit Google with two ...

Pierluigi Paganini July 24, 2026
Hacking
Thailand's Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged

Hunt.io uncovered a cyber-espionage attack on Thailand’s Finance Ministry using Hermes AI agent and Hades malware for reconnaissance and persistence. Researchers at Hunt.io have uncovered an int ...

Pierluigi Paganini July 24, 2026