MUST READ

Poland's CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw

 | 

U.S. CISA adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog

 | 

Cl0p Targets 40+ Organizations Through PTC Windchill Flaw

 | 

Manic: The Android Malware That Exfiltrates Data Even When the Phone Is Offline

 | 

U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog

 | 

US Indicts 17 Iranians Over Years-Long Cyber Espionage Campaign

 | 

StopAndProtect Turns 2,000 Hacked WordPress Sites Into a Criminal Network

 | 

Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras

 | 

Microsoft Tracks MacSync Stealer by Its Behavior, Not Its Domains

 | 

50,000 Stripe Secrets Leaked in Public Code

 | 

U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog

 | 

Hackers Expose Data of 1.2 Million Heights Finance Customers

 | 

Project noRecognition: Teaching AI to Fool Surveillance Cameras

 | 

U.S. CISA adds a Ray-Project Ray flaw to its Known Exploited Vulnerabilities catalog

 | 

New Mirai-Based Evooo1Bot Botnet Targets Linux Devices

 | 

SafePal Says 39,798 Customers Hit by Data Breach

 | 

LiteLLM Supply-Chain Attack - Technology, Banking and Healthcare the Most Affected

 | 

Invisible AI Prompts Trigger Court Sanctions

 | 

McDonald’s Employee Data Appears in Leak, Seller Claims 1.7M Records Stolen

 | 

Akira Ransomware Uses Safe Mode to Bypass EDR

 | 

LATEST NEWS

VIEW ALL
Security
Poland's CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw
Pierluigi Paganini August 21, 2026

CERT Polska confirmed active exploitation of CVE-2026-73570, a critical unauthenticated RCE in Zimbra Collaboration Suite patched on July 20. CERT Polska, Poland's national computer emergency resp ...

Security
U.S. CISA adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog
Pierluigi Paganini August 21, 2026

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (C ...

Cyber Crime
Cl0p Targets 40+ Organizations Through PTC Windchill Flaw
Pierluigi Paganini August 21, 2026

Cl0p claims over 40 organizations fell victim to attacks exploiting a PTC Windchill and FlexPLM vulnerability. Cl0p is using a familiar strategy again: exploit one flaw in enterprise software to a ...

Malware
Manic: The Android Malware That Exfiltrates Data Even When the Phone Is Offline
Pierluigi Paganini August 20, 2026

Manic Android malware combines banking fraud and spyware, using a Bluetooth relay to steal data even when devices are offline. ThreatFabric's Mobile Threat Intelligence team has identified a new A ...

top articles

Hackers access Booking.com user data, company secures systems
April 13, 2026
Inside ZionSiphon: politically driven malware aims at Israeli water systems
April 17, 2026
RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
April 23, 2026
Checkmarx supply chain attack impacts Bitwarden npm distribution path
April 24, 2026
Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed
April 26, 2026

newsletter

Subscribe to my email list and stay
up-to-date!

most popular

VIEW ALL
Security

Poland's CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw

August 21, 2026

Security
U.S. CISA adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog

August 21, 2026

Cyber Crime
Cl0p Targets 40+ Organizations Through PTC Windchill Flaw

August 21, 2026

Malware
Manic: The Android Malware That Exfiltrates Data Even When the Phone Is Offline

August 20, 2026

Hacking
U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog

August 20, 2026

recent articles

Security
Poland's CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw

CERT Polska confirmed active exploitation of CVE-2026-73570, a critical unauthenticated RCE in Zimbra Collaboration Suite patched on July 20. CERT Polska, Poland's national computer emergency resp ...

Pierluigi Paganini August 21, 2026
Security
U.S. CISA adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (C ...

Pierluigi Paganini August 21, 2026
Cyber Crime
Cl0p Targets 40+ Organizations Through PTC Windchill Flaw

Cl0p claims over 40 organizations fell victim to attacks exploiting a PTC Windchill and FlexPLM vulnerability. Cl0p is using a familiar strategy again: exploit one flaw in enterprise software to a ...

Pierluigi Paganini August 21, 2026
Malware
Manic: The Android Malware That Exfiltrates Data Even When the Phone Is Offline

Manic Android malware combines banking fraud and spyware, using a Bluetooth relay to steal data even when devices are offline. ThreatFabric's Mobile Threat Intelligence team has identified a new A ...

Pierluigi Paganini August 20, 2026
Hacking
U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds an MLflow vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency ...

Pierluigi Paganini August 20, 2026
Intelligence
US Indicts 17 Iranians Over Years-Long Cyber Espionage Campaign

The US charged 17 Iranians over a years-long hacking campaign that stole 31TB from universities, companies and government agencies worldwide. Eight years after the original indictment first went p ...

Pierluigi Paganini August 20, 2026
Hacking
StopAndProtect Turns 2,000 Hacked WordPress Sites Into a Criminal Network

StopAndProtect turned nearly 2,000 hacked WordPress sites into a criminal network for malware delivery, data theft, surveillance and ransomware. Check Point Research uncovered a cybercrime operati ...

Pierluigi Paganini August 20, 2026
Internet of Things
Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras

An exposed operator directory reveals how one actor compromised 14,000+ Dahua cameras across Ukraine and Russia, no password needed for most. A researcher discovered an exposed directory containin ...

Pierluigi Paganini August 19, 2026
Malware
Microsoft Tracks MacSync Stealer by Its Behavior, Not Its Domains

Microsoft tracked over 30 MacSync Stealer domains by focusing on behavioral patterns, revealing a campaign targeting passwords, keys, wallets and other data. Domain blocking is a losing game when ...

Pierluigi Paganini August 19, 2026
Cyber Crime
50,000 Stripe Secrets Leaked in Public Code

Over 50,000 exposed Stripe API keys show how leaked secrets can enable fraud, data access and account abuse within hours. Ransomnews researchers have documented a large-scale leak of Stripe mercha ...

Pierluigi Paganini August 19, 2026
Hacking
U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog. ...

Pierluigi Paganini August 19, 2026
Data Breach
Hackers Expose Data of 1.2 Million Heights Finance Customers

A Heights Finance breach exposed personal and financial data of over 1.2 million people after hackers compromised a third-party cloud platform. Heights Finance is a U.S. consumer finance company t ...

Pierluigi Paganini August 18, 2026
Artificial Intelligence
Project noRecognition: Teaching AI to Fool Surveillance Cameras

Researchers tested 31 million patterns to disrupt surveillance AI, with promising results but significant gaps between simulation and real-world use. The Kansas City-based cybersecurity researcher ...

Pierluigi Paganini August 18, 2026
Security
U.S. CISA adds a Ray-Project Ray flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Ray-Project Ray vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security ...

Pierluigi Paganini August 18, 2026
Malware
New Mirai-Based Evooo1Bot Botnet Targets Linux Devices

Evooo1Bot is a Mirai-based Linux botnet that hijacks routers and IoT devices for DDoS attacks, credential theft and criminal proxy services. Fortinet's FortiGuard Labs disclosed Evooo1Bot in mid-A ...

Pierluigi Paganini August 18, 2026
Data Breach
SafePal Says 39,798 Customers Hit by Data Breach

SafePal says a breach exposed personal data of 39,798 customers, but not wallet credentials, private keys, seed phrases, or payment information. SafePal disclosed a data breach affecting about 39, ...

Pierluigi Paganini August 17, 2026
Hacking
LiteLLM Supply-Chain Attack - Technology, Banking and Healthcare the Most Affected

The SANDCLOCK LiteLLM supply-chain attack exposed credentials across 2,038 repositories, affecting technology, finance, healthcare, retail and more. Resecurity (USA) estimated the most affected se ...

Pierluigi Paganini August 17, 2026
Artificial Intelligence
Invisible AI Prompts Trigger Court Sanctions

A litigant hid AI prompt injections in a court filing to influence a ruling. The judge caught it and banned him from electronic filing. A man suing the New York Bariatric Group reportedly hid AI p ...

Pierluigi Paganini August 17, 2026
Cyber Crime
McDonald’s Employee Data Appears in Leak, Seller Claims 1.7M Records Stolen

A seller claims 1.7M McDonald’s employee records were stolen from Azure. An 8,000-row sample appears genuine, but its age and full size remain unconfirmed. A seller on a data-trading forum poste ...

Pierluigi Paganini August 17, 2026
Malware
Akira Ransomware Uses Safe Mode to Bypass EDR

Akira attackers used Safe Mode to disable EDR before deploying ransomware, but memory issues caused the encryptor to fail. An Akira ransomware affiliate broke into a company through an MFA-less So ...

Pierluigi Paganini August 17, 2026