MUST READ

Conti Hacker Who Built Malware and Attacked Victims Gets Four-Year Sentence

 | 

Anthropic: AI Misuse Is Entering a New Phase: From Cybercrime to Surveillance, Propaganda and Weapons

 | 

The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet

 | 

Attackers Exploit Critical Cisco FMC Flaw to deploy Qilin ransomware

 | 

UK Council Attack Linked to Mass Exploitation of SonicWall Flaw

 | 

U.S. CISA adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog

 | 

More Capable AI, Not Enough Guardrails

 | 

A New Claude 's Sandbox Failure Shows How AI Can Rationalize Real-World Harm

 | 

U.S. CISA adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalog

 | 

Four Nation-State Actors Used the Same Chrome Zero-Day Exploit Kit Within 12 Days

 | 

US Agencies Warn Chinese AI Firms Are Extracting Advanced AI Models

 | 

Google fixes the seventh actively exploited Chrome zero-day of 2026

 | 

PoisonedRefresh: A Fileless Linux Rootkit That Injects PHP Web Shells Into F5 BIG-IP APM Server Memory

 | 

Chaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-Day

 | 

Microsoft’s Biggest Patch Tuesday: 974 CVEs, 2 Zero-Days and 20 Wormable Bugs

 | 

Hackers Drain $320 Million From Liquid Network, Then Return Most of It

 | 

WeChat Worm Can Hijack Accounts Without Victims Answering Calls

 | 

Massive Vietnam-Linked APIS Database Exposes Passport and Flight Data

 | 

North Korea-linked Hackers Hide a Backdoor Inside HAProxy

 | 

IT Help Desk Impersonation Lets Hackers Bypass MFA

 | 

LATEST NEWS

VIEW ALL
Cyber Crime
Conti Hacker Who Built Malware and Attacked Victims Gets Four-Year Sentence
Pierluigi Paganini September 13, 2026

Ukrainian lawyer and Conti malware developer Oleksii Lytvynenko was sentenced to four years in U.S. prison for ransomware attacks. Oleksii Oleksiyovych Lytvynenko had, by most accounts, a fairly o ...

Data Breach
Revolut Exposed KYC Data After Fraudulent Government Email Passed Security Checks
Pierluigi Paganini September 12, 2026

Revolut handed over KYC documents, selfies, and Bitcoin transaction histories after a fake government email with valid domain credentials passed its checks. Revolut confirmed on September 12, 2026 ...

Artificial Intelligence
Anthropic: AI Misuse Is Entering a New Phase: From Cybercrime to Surveillance, Propaganda and Weapons
Pierluigi Paganini September 12, 2026

AI is becoming an operational force for cybercrime, surveillance, propaganda, fraud and weapons development, lowering the cost and scale of attacks. Artificial intelligence (AI) is becoming more t ...

Artificial Intelligence
The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet
Pierluigi Paganini September 11, 2026

Researchers found 36,769 exposed AI endpoints, but only 2% had an HTTP authentication gate. Running AI locally is supposed to give organizations more control. Models, prompts and documents stay on ...

top articles

Hackers access Booking.com user data, company secures systems
April 13, 2026
Inside ZionSiphon: politically driven malware aims at Israeli water systems
April 17, 2026
RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
April 23, 2026
Checkmarx supply chain attack impacts Bitwarden npm distribution path
April 24, 2026
Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed
April 26, 2026

newsletter

Subscribe to my email list and stay
up-to-date!

most popular

VIEW ALL
Cyber Crime

Conti Hacker Who Built Malware and Attacked Victims Gets Four-Year Sentence

September 13, 2026

Artificial Intelligence
Anthropic: AI Misuse Is Entering a New Phase: From Cybercrime to Surveillance, Propaganda and Weapons

September 12, 2026

Artificial Intelligence
The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet

September 11, 2026

Cyber Crime
Attackers Exploit Critical Cisco FMC Flaw to deploy Qilin ransomware

September 11, 2026

Hacking
UK Council Attack Linked to Mass Exploitation of SonicWall Flaw

September 11, 2026

recent articles

Cyber Crime
Conti Hacker Who Built Malware and Attacked Victims Gets Four-Year Sentence

Ukrainian lawyer and Conti malware developer Oleksii Lytvynenko was sentenced to four years in U.S. prison for ransomware attacks. Oleksii Oleksiyovych Lytvynenko had, by most accounts, a fairly o ...

Pierluigi Paganini September 13, 2026
Artificial Intelligence
Anthropic: AI Misuse Is Entering a New Phase: From Cybercrime to Surveillance, Propaganda and Weapons

AI is becoming an operational force for cybercrime, surveillance, propaganda, fraud and weapons development, lowering the cost and scale of attacks. Artificial intelligence (AI) is becoming more t ...

Pierluigi Paganini September 12, 2026
Artificial Intelligence
The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet

Researchers found 36,769 exposed AI endpoints, but only 2% had an HTTP authentication gate. Running AI locally is supposed to give organizations more control. Models, prompts and documents stay on ...

Pierluigi Paganini September 11, 2026
Cyber Crime
Attackers Exploit Critical Cisco FMC Flaw to deploy Qilin ransomware

Three threat groups are exploiting two Cisco FMC flaws to steal credentials, gain root access and deploy Qilin ransomware. Cisco Talos says three separate threat groups are exploiting two recently ...

Pierluigi Paganini September 11, 2026
Hacking
UK Council Attack Linked to Mass Exploitation of SonicWall Flaw

A critical SonicWall flaw was rapidly weaponized, with a UK Council attack linked to a campaign that exposed credentials and enabled Active Directory theft. On July 17, 2026, the Borough Council o ...

Pierluigi Paganini September 11, 2026
Security
U.S. CISA adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecu ...

Pierluigi Paganini September 10, 2026
Artificial Intelligence
More Capable AI, Not Enough Guardrails

AI agents are gaining real-world access faster than safeguards can mature, making permissions, isolation and oversight critical to prevent harmful actions. Jacob Coxon, a researcher who spent thre ...

Pierluigi Paganini September 10, 2026
Hacking
A New Claude 's Sandbox Failure Shows How AI Can Rationalize Real-World Harm

Claude models compromised real systems during misconfigured security tests, exposing a worrying mix of flawed reasoning, harmful actions and weak safeguards. Anthropic just published one of the mo ...

Pierluigi Paganini September 10, 2026
Hacking
U.S. CISA adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and In ...

Pierluigi Paganini September 10, 2026
APT
Four Nation-State Actors Used the Same Chrome Zero-Day Exploit Kit Within 12 Days

Four espionage groups used the BlueMoon Chrome+Windows exploit kit within 12 days. Researchers suspect AI development. Proofpoint published a detailed analysis of a Chrome-and-Windows exploit kit ...

Pierluigi Paganini September 10, 2026
Security
US Agencies Warn Chinese AI Firms Are Extracting Advanced AI Models

US agencies accuse six Chinese AI firms of extracting billions of tokens from US AI models to accelerate development and copy advanced capabilities. NSA, CISA, and the FBI jointly published an adv ...

Pierluigi Paganini September 09, 2026
Security
Google fixes the seventh actively exploited Chrome zero-day of 2026

Google patched 230 Chrome flaws, including an actively exploited V8 bug that could let attackers run arbitrary code through a crafted HTML page. Google released a Chrome update fixing 230 security ...

Pierluigi Paganini September 09, 2026
Malware
PoisonedRefresh: A Fileless Linux Rootkit That Injects PHP Web Shells Into F5 BIG-IP APM Server Memory

PoisonedRefresh rootkit injects PHP web shells into F5 BIG-IP APM Apache memory, leaving no disk artifacts. SophosLabs published a detailed technical analysis on September 8, 2026, of a Linux impl ...

Pierluigi Paganini September 09, 2026
Security
Chaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-Day

The researcher Chaotic Eclipse released ShieldCrash, a PoC exploit for a Microsoft Defender Zero-Day vulnerability. Security researcher Chaotic Eclipse, also known as INFINITE NIGHTMARE, MSNightm ...

Pierluigi Paganini September 09, 2026
Security
Microsoft’s Biggest Patch Tuesday: 974 CVEs, 2 Zero-Days and 20 Wormable Bugs

September 2026 Patch Tuesday fixes a record 974 CVEs including 2 exploited zero-days, 20 wormable bugs, and a critical Exchange RCE via Visio email. Microsoft’s September 2026 Patch Tuesday set ...

Pierluigi Paganini September 09, 2026
Cyber Crime
Hackers Drain $320 Million From Liquid Network, Then Return Most of It

Crypto exchange network Liquid Network lost $320 million overnight, then got most of it back after the hackers demanded a bug fix instead of a ransom Bitcoin's Liquid Network, a sidechain built by ...

Pierluigi Paganini September 08, 2026
Hacking
WeChat Worm Can Hijack Accounts Without Victims Answering Calls

Researchers built a WeChat worm that spreads through incoming calls without user action. Tencent has blocked the exploit. Researchers at Calif created a WeChat worm that can take over an account t ...

Pierluigi Paganini September 08, 2026
Data Breach
Massive Vietnam-Linked APIS Database Exposes Passport and Flight Data

An exposed Vietnam-linked APIS database contained 220.8 million passenger and crew records, including passport and flight data. Researchers found an exposed Advance Passenger Information System (A ...

Pierluigi Paganini September 08, 2026
APT
North Korea-linked Hackers Hide a Backdoor Inside HAProxy

North Korea-linked hackers hid a backdoor inside HAProxy, masking C2 traffic and stealing data while keeping the load balancer working normally. North Korean-linked hackers found a genuinely cleve ...

Pierluigi Paganini September 08, 2026
Cyber Crime
IT Help Desk Impersonation Lets Hackers Bypass MFA

Attackers bypass endpoint security by posing as IT staff, stealing Microsoft 365 sessions, draining SaaS data and demanding extortion. Forget installing malware because today’s extortionists jus ...

Pierluigi Paganini September 08, 2026