LATEST NEWS

VIEW ALL
The majority Mac users safe from Bash Bug while Oracle warns its customers
Pierluigi Paganini September 28, 2014

Apple says users of its OS X are "safe by default" from the Bash Bug, meanwhile Oracle warns its customers that 32 products are affected by the flaw. The recently discovered Bash Bug vulnerabilit ...

The Fappening 3, other nude celebrity photos leaked
Pierluigi Paganini September 27, 2014

A new collection of photos belonging to the Fappening archives have been leaked online, it includes nudes of Jennifer Lawrence and other celebrities. The Fappening is now in its third episode a ...

NSA spies on UN in Vienna - The Leaked photos
Pierluigi Paganini September 27, 2014

The journalist Erich Möchel leaked photos reported alleged NSA monitoring stations in Vienna which are used by the Intelligence to spy on UN. Photos published by the journalist Erich Möchel in a b ...

FBI concerned about encryption by default for Smartphones
Pierluigi Paganini September 27, 2014

FBI Director James Comey said that he was "very concerned" about decision on Apple and Google to implement data encryption by default on their Smartphones. The FBI is concerned about the improvements ...

recent articles

Security
US Agencies Warn Chinese AI Firms Are Extracting Advanced AI Models

US agencies accuse six Chinese AI firms of extracting billions of tokens from US AI models to accelerate development and copy advanced capabilities. NSA, CISA, and the FBI jointly published an adv ...

Pierluigi Paganini September 09, 2026
Security
Google fixes the seventh actively exploited Chrome zero-day of 2026

Google patched 230 Chrome flaws, including an actively exploited V8 bug that could let attackers run arbitrary code through a crafted HTML page. Google released a Chrome update fixing 230 security ...

Pierluigi Paganini September 09, 2026
Malware
PoisonedRefresh: A Fileless Linux Rootkit That Injects PHP Web Shells Into F5 BIG-IP APM Server Memory

PoisonedRefresh rootkit injects PHP web shells into F5 BIG-IP APM Apache memory, leaving no disk artifacts. SophosLabs published a detailed technical analysis on September 8, 2026, of a Linux impl ...

Pierluigi Paganini September 09, 2026
Security
Chaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-Day

The researcher Chaotic Eclipse released ShieldCrash, a PoC exploit for a Microsoft Defender Zero-Day vulnerability. Security researcher Chaotic Eclipse, also known as INFINITE NIGHTMARE, MSNightm ...

Pierluigi Paganini September 09, 2026
Security
Microsoft’s Biggest Patch Tuesday: 974 CVEs, 2 Zero-Days and 20 Wormable Bugs

September 2026 Patch Tuesday fixes a record 974 CVEs including 2 exploited zero-days, 20 wormable bugs, and a critical Exchange RCE via Visio email. Microsoft’s September 2026 Patch Tuesday set ...

Pierluigi Paganini September 09, 2026
Cyber Crime
Hackers Drain $320 Million From Liquid Network, Then Return Most of It

Crypto exchange network Liquid Network lost $320 million overnight, then got most of it back after the hackers demanded a bug fix instead of a ransom Bitcoin's Liquid Network, a sidechain built by ...

Pierluigi Paganini September 08, 2026
Hacking
WeChat Worm Can Hijack Accounts Without Victims Answering Calls

Researchers built a WeChat worm that spreads through incoming calls without user action. Tencent has blocked the exploit. Researchers at Calif created a WeChat worm that can take over an account t ...

Pierluigi Paganini September 08, 2026
Data Breach
Massive Vietnam-Linked APIS Database Exposes Passport and Flight Data

An exposed Vietnam-linked APIS database contained 220.8 million passenger and crew records, including passport and flight data. Researchers found an exposed Advance Passenger Information System (A ...

Pierluigi Paganini September 08, 2026
APT
North Korea-linked Hackers Hide a Backdoor Inside HAProxy

North Korea-linked hackers hid a backdoor inside HAProxy, masking C2 traffic and stealing data while keeping the load balancer working normally. North Korean-linked hackers found a genuinely cleve ...

Pierluigi Paganini September 08, 2026
Cyber Crime
IT Help Desk Impersonation Lets Hackers Bypass MFA

Attackers bypass endpoint security by posing as IT staff, stealing Microsoft 365 sessions, draining SaaS data and demanding extortion. Forget installing malware because today’s extortionists jus ...

Pierluigi Paganini September 08, 2026
Data Breach
Condé Nast Data of 32.8 Million Users Offered for Sale After WIRED Leak

Condé Nast user data from 32.8 million accounts is reportedly for sale, raising risks of targeted phishing, fraud and scams. A database said to contain 32.8 million Condé Nast user records is be ...

Pierluigi Paganini September 07, 2026
Uncategorized
StyleSmuggler: The Magento Zero-Day Behind New Store Attacks

StyleSmuggler Magento zero-day is under active attack, letting unauthenticated attackers execute code and install backdoors on stores that may already be patched. A new zero-day flaw, dubbed Style ...

Pierluigi Paganini September 07, 2026
Hacking
Chaotic Eclipse Released GreenSection, A PoC For NVIDIA Memory Corruption Zero-Day

Chaotic Eclipse released GreenSection, a PoC exploit for an Nvidia Memory Corruption Zero-Day Security researcher Chaotic Eclipse, also known as INFINITE NIGHTMARE, MSNightmare and Nightmare- ...

Pierluigi Paganini September 07, 2026
Malware
JSCeal Hides Crypto Malware in V8 Bytecode

JSCeal hides crypto-stealing malware in V8 bytecode, but researchers built a tool to decompile it and expose its advanced theft capabilities. JSCeal is a cryptocurrency stealer that Check Point Re ...

Pierluigi Paganini September 07, 2026
Artificial Intelligence
Why AI Agent Sandboxes Are Failing Security Tests

Autonomous AI agents escaped a sandbox and accessed Hugging Face via reward hacking, exposing serious architectural control and isolation flaws. The recent case involving OpenAI test agents and Hu ...

Pierluigi Paganini September 07, 2026
Cyber Crime
Berlin Ransomware Leak Exposes State Secrets

Berlin refused a 30 Bitcoin ransom, leading hackers to leak 6TB of sensitive state administration and national defense data on the dark web. When a ransomware gang dumps nearly six terabytes of st ...

Pierluigi Paganini September 07, 2026
Security
Your MikroTik Router May Already Be Compromised: Look for SSH User “-2”

MikroTik RouterOS SSH zero-day (MikroTrick chain) under active exploitation since Sept 2. Patch to 7.24.2, 7.23.5, or 6.49.21 immediately and check logs. Anyone running a MikroTik router with SSH ...

Pierluigi Paganini September 06, 2026
Artificial Intelligence
AI Agents Hijacked German Wiki to Cheat, OpenAI Delayed Disclosure

AI agents secretly took over a 25-year-old German wiki for two months to cheat on tests, and OpenAI sat on the news until reporters found it first OpenAI finally admitted this weekend that a swarm ...

Pierluigi Paganini September 06, 2026
Breaking News
Security Affairs newsletter Round 593 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini September 06, 2026
Artificial Intelligence
OpenAI Announced $1B in Defensive Tools for Water Utilities

OpenAI pledges $1B in subsidized Daybreak AI cybersecurity tools for under-resourced critical infrastructure defenders. OpenAI announced Daybreak for Frontline Defenders on September 3, 2026, comm ...

Pierluigi Paganini September 05, 2026