LATEST NEWS

VIEW ALL
Cybersecurity Executive Order Recommendation issued by ISC2
Pierluigi Paganini April 26, 2017

(ISC)² delivered recommendations to White House urging prioritization on development of workforce for the final version of the cybersecurity executive order The nonprofit organization (ISC)² has is ...

Four Essential Security & Privacy Extensions for Chrome
Pierluigi Paganini April 26, 2017

Here are the top four extensions for the Chrome browser to keep your online activity safe, secure and private. The recent global wave of cybercrimes, particularly via exploiting loopholes in many lea ...

Atlassian HipChat group chat service hacked, change your password now!
Pierluigi Paganini April 26, 2017

Atlassian announced that unknown hackers broke into a cloud server of the company and accessed a huge amount of data of its group chat service HipChat. On Monday, Atlassian reset user passwords for ...

Cybercrime - Interpol shutdown nearly 9,000 C&C servers in Asia hacked with a WordPress plug exploit
Pierluigi Paganini April 26, 2017

The Interpol located and shut down nearly 9,000 Command and control servers located in Asia and hacked with a WordPress plug-in exploit. An investigation conducted by the Interpol resulted in the ide ...

recent articles

Data Breach
Hackers Expose Data of 1.2 Million Heights Finance Customers

A Heights Finance breach exposed personal and financial data of over 1.2 million people after hackers compromised a third-party cloud platform. Heights Finance is a U.S. consumer finance company t ...

Pierluigi Paganini August 18, 2026
Artificial Intelligence
Project noRecognition: Teaching AI to Fool Surveillance Cameras

Researchers tested 31 million patterns to disrupt surveillance AI, with promising results but significant gaps between simulation and real-world use. The Kansas City-based cybersecurity researcher ...

Pierluigi Paganini August 18, 2026
Security
U.S. CISA adds a Ray-Project Ray flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Ray-Project Ray vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security ...

Pierluigi Paganini August 18, 2026
Malware
New Mirai-Based Evooo1Bot Botnet Targets Linux Devices

Evooo1Bot is a Mirai-based Linux botnet that hijacks routers and IoT devices for DDoS attacks, credential theft and criminal proxy services. Fortinet's FortiGuard Labs disclosed Evooo1Bot in mid-A ...

Pierluigi Paganini August 18, 2026
Data Breach
SafePal Says 39,798 Customers Hit by Data Breach

SafePal says a breach exposed personal data of 39,798 customers, but not wallet credentials, private keys, seed phrases, or payment information. SafePal disclosed a data breach affecting about 39, ...

Pierluigi Paganini August 17, 2026
Hacking
LiteLLM Supply-Chain Attack - Technology, Banking and Healthcare the Most Affected

The SANDCLOCK LiteLLM supply-chain attack exposed credentials across 2,038 repositories, affecting technology, finance, healthcare, retail and more. Resecurity (USA) estimated the most affected se ...

Pierluigi Paganini August 17, 2026
Artificial Intelligence
Invisible AI Prompts Trigger Court Sanctions

A litigant hid AI prompt injections in a court filing to influence a ruling. The judge caught it and banned him from electronic filing. A man suing the New York Bariatric Group reportedly hid AI p ...

Pierluigi Paganini August 17, 2026
Cyber Crime
McDonald’s Employee Data Appears in Leak, Seller Claims 1.7M Records Stolen

A seller claims 1.7M McDonald’s employee records were stolen from Azure. An 8,000-row sample appears genuine, but its age and full size remain unconfirmed. A seller on a data-trading forum poste ...

Pierluigi Paganini August 17, 2026
Malware
Akira Ransomware Uses Safe Mode to Bypass EDR

Akira attackers used Safe Mode to disable EDR before deploying ransomware, but memory issues caused the encryptor to fail. An Akira ransomware affiliate broke into a company through an MFA-less So ...

Pierluigi Paganini August 17, 2026
Hacking
DDoS Attacks Cause Major Threema Outages

Large DDoS attacks disrupted Threema, causing severe communication outages. Threema On-Prem users were unaffected by the attacks. Threema suffered multiple large-scale DDoS attacks that disrupted ...

Pierluigi Paganini August 16, 2026
Malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 110

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Kimsuky Integrates AI into Attack Operat ...

Pierluigi Paganini August 16, 2026
APT
Mustang Panda Upgrades CoolClient With a Kernel Rootkit

Mustang Panda upgraded CoolClient with a signed kernel driver that hides processes, files and network activity, making the backdoor harder to detect. HoneyMyte, also known as Mustang Panda, has pu ...

Pierluigi Paganini August 16, 2026
Cyber Crime
Sophisticated Cyberattack Exposes Data of 678,000 French Taxpayers

France's tax agency says hackers stole data on 678,000 taxpayers, including income and tax details, in a sophisticated cyberattack. A threat actor claimed to have breached France’s tax agency in ...

Pierluigi Paganini August 16, 2026
Breaking News
Security Affairs newsletter Round 590 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini August 16, 2026
Intelligence
APT36 Suspected in PATCHCORD Espionage Campaign Using Google Sheets C2

Acronis uncovered PATCHCORD, a stealthy backdoor targeting Afghan telecom and South Asian infrastructure via fake VPN tools and Google Sheets C2. Researchers at Acronis just documented an espionag ...

Pierluigi Paganini August 16, 2026
Cyber Crime
Crooks Are Buying Your Expired Domains and Using Them to Deliver Malware

Attackers are buying expired domains to exploit their reputation, traffic and DNS history, using them for malware delivery, scams and C2 infrastructure. Every day, roughly 65,000 domain names that ...

Pierluigi Paganini August 15, 2026
Uncategorized
macOS Screen Sharing Flaw Exploited to Deploy Monero Miners

Hackers are exploiting a macOS Screen Sharing flaw to gain root access and install Monero miners on Macs with port 5900 exposed online. The Dutch National Cyber Security Centre confirmed active ex ...

Pierluigi Paganini August 15, 2026
Hacking
GeoServer Zero-Day Is Already Being Probed. That’s the Problem

GeoServer faces an unpatched zero-day enabling SQL injection and potentially RCE, with attackers already probing exposed systems. A newly disclosed GeoServer zero-day is already attracting active ...

Pierluigi Paganini August 15, 2026
Malware
Apple warned hundreds of users of mercenary spyware attacks

Apple warns users of credible, targeted attacks and urges immediate verification, stronger protections, and expert assistance. Apple has sent a new round of threat notifications to users it believ ...

Pierluigi Paganini August 14, 2026
Malware
AmnesiaStealer Gives Attackers Live Control of Victims’ macOS Browsers

AmnesiaStealer targets macOS users through fake GitHub pages, stealing passwords, cookies and data while giving attackers live control of the browser. Jamf Threat Labs researchers disclosed Amnesi ...

Pierluigi Paganini August 14, 2026