MUST READ

F5 addressed critical RCE flaws in NGINX

 | 

U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog

 | 

PEERSTITCH malware: How Attackers Compromised 500 Firewalls Through FortiManager

 | 

CenterPoint Energy Data Breach: More Than 1 Million Texans Affected

 | 

U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog

 | 

Silent Lynx: Kazakhstan-Linked Hackers Target Russian Refinery and Government

 | 

AdFection: Beyond the Click: Citizen Lab Exposes Ad-Delivered Spyware Networks

 | 

Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise

 | 

Hirudo Android Trojan Replaces Banking Apps to Steal Credentials

 | 

U.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog

 | 

Microsoft Patch Tuesday Sets New Record with 1,415 CVEs in October 2026 Updates

 | 

Hidden Audio Recorder Found at OpenAI as Employee Faces Federal Charges

 | 

Volexity Uncovers Stealthy Ivanti VPN Attack Using Three Zero-Day Vulnerabilities

 | 

How a leaked builder of XWorm turned a remote access trojan into a surveillance kit

 | 

U.S. CISA adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog

 | 

Anthropic Shows How Small AI Models Could Replicate Across IoT Devices

 | 

GitLab Patches Max-Severity Vulnerability CVE-2026-97229

 | 

Hackers cranked French supermarkets' freezers up to 50 degrees, causing hundreds of stores to lose their stock

 | 

ShinyHunters arrest number three: a Canadian ransomware negotiator

 | 

Canonical Hit by Second DDoS Attack in 2026, Public Websites Disrupted

 | 

LATEST NEWS

VIEW ALL
Security
F5 addressed critical RCE flaws in NGINX
Pierluigi Paganini October 16, 2026

F5 addressed multiple vulnerabilities, including critical RCE flaws in NGINX that attackers could exploit without authentication. Security and application delivery firm F5 announced fixes for elev ...

Hacking
U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog
Pierluigi Paganini October 16, 2026

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Atlassian flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) a ...

Malware
PEERSTITCH malware: How Attackers Compromised 500 Firewalls Through FortiManager
Pierluigi Paganini October 16, 2026

PEERSTITCH malware exploited FortiManager to expose 500+ firewalls, evade detection inside FortiOS memory, and maintain stealthy access. PEERSTITCH, a stealthy implant deployed during a prolonged ...

Cyber Crime
CenterPoint Energy Data Breach: More Than 1 Million Texans Affected
Pierluigi Paganini October 16, 2026

The regulated utility company CenterPoint Energy says a data breach exposed the personal information of more than 1 million people in Texas. CenterPoint Energy is a regulated utility company used ...

top articles

Hackers access Booking.com user data, company secures systems
April 13, 2026
Inside ZionSiphon: politically driven malware aims at Israeli water systems
April 17, 2026
RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
April 23, 2026
Checkmarx supply chain attack impacts Bitwarden npm distribution path
April 24, 2026
Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed
April 26, 2026

newsletter

Subscribe to my email list and stay
up-to-date!

most popular

VIEW ALL
Security

F5 addressed critical RCE flaws in NGINX

October 16, 2026

Hacking
U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog

October 16, 2026

Malware
PEERSTITCH malware: How Attackers Compromised 500 Firewalls Through FortiManager

October 16, 2026

Cyber Crime
CenterPoint Energy Data Breach: More Than 1 Million Texans Affected

October 16, 2026

Security
U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog

October 15, 2026

recent articles

Security
F5 addressed critical RCE flaws in NGINX

F5 addressed multiple vulnerabilities, including critical RCE flaws in NGINX that attackers could exploit without authentication. Security and application delivery firm F5 announced fixes for elev ...

Pierluigi Paganini October 16, 2026
Hacking
U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Atlassian flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) a ...

Pierluigi Paganini October 16, 2026
Malware
PEERSTITCH malware: How Attackers Compromised 500 Firewalls Through FortiManager

PEERSTITCH malware exploited FortiManager to expose 500+ firewalls, evade detection inside FortiOS memory, and maintain stealthy access. PEERSTITCH, a stealthy implant deployed during a prolonged ...

Pierluigi Paganini October 16, 2026
Cyber Crime
CenterPoint Energy Data Breach: More Than 1 Million Texans Affected

The regulated utility company CenterPoint Energy says a data breach exposed the personal information of more than 1 million people in Texas. CenterPoint Energy is a regulated utility company used ...

Pierluigi Paganini October 16, 2026
Security
U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog. Th ...

Pierluigi Paganini October 15, 2026
APT
Silent Lynx: Kazakhstan-Linked Hackers Target Russian Refinery and Government

Silent Lynx, a group likely based in Kazakhstan, targets Russian energy and government entities in espionage campaigns across Central Asia. Researchers from Cisco Talos and Recorded Future publish ...

Pierluigi Paganini October 15, 2026
Hacking
AdFection: Beyond the Click: Citizen Lab Exposes Ad-Delivered Spyware Networks

Spyware vendors use online ad infrastructure to profile targets and deliver exploits without requiring users to click anything. The investigation links Discover-Tech to Candiru, an Israeli spyware ...

Pierluigi Paganini October 15, 2026
Security
Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise

Attackers exploit a critical Cisco email gateway flaw to gain root access. Cisco urges customers to update scanner tools and check for compromise. Cisco confirmed this week that threat actors are ...

Pierluigi Paganini October 15, 2026
Malware
Hirudo Android Trojan Replaces Banking Apps to Steal Credentials

Android trojan Hirudo replaces genuine banking apps with modified versions to steal credentials and bypass security checks, enabling financial fraud. ThreatFabric researchers detailed a new Androi ...

Pierluigi Paganini October 15, 2026
Hacking
U.S. CISA adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows Shell flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Ag ...

Pierluigi Paganini October 14, 2026
Security
Microsoft Patch Tuesday Sets New Record with 1,415 CVEs in October 2026 Updates

Microsoft Patch Tuesday security updates for October 2026 address a record 1,415 vulnerabilities. Prioritize the exploited zero-day, critical bugs and potentially wormable vulnerabilities. Microso ...

Pierluigi Paganini October 14, 2026
Cyber Crime
Hidden Audio Recorder Found at OpenAI as Employee Faces Federal Charges

OpenAI employee charged with planting hidden audio recorders to capture sensitive discussions about AI research and company strategy. On September 30, OpenAI staff found a small audio recording de ...

Pierluigi Paganini October 14, 2026
Hacking
Volexity Uncovers Stealthy Ivanti VPN Attack Using Three Zero-Day Vulnerabilities

Ivanti VPN zero-days let attackers gain root access, steal credentials, evade detection, and prepare for wider network compromise. On October 5, Volexity started investigating suspicious activity ...

Pierluigi Paganini October 14, 2026
Malware
How a leaked builder of XWorm turned a remote access trojan into a surveillance kit

Netskope tracks four XWorm versions in the wild, 46 plugins, and new tools for location, audio and live browser control, with detections up fourfold. Netskope Threat Labs has been following XWorm ...

Pierluigi Paganini October 14, 2026
Security
U.S. CISA adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agen ...

Pierluigi Paganini October 13, 2026
Artificial Intelligence
Anthropic Shows How Small AI Models Could Replicate Across IoT Devices

Anthropic researchers show how small AI models could autonomously replicate across IoT devices, raising concerns about adaptive, AI-powered botnets. Anthropic published a paper this week that shou ...

Pierluigi Paganini October 13, 2026
Security
GitLab Patches Max-Severity Vulnerability CVE-2026-97229

GitLab fixed a critical vulnerability with a maximum CVSS score of 10.0 that could let unauthenticated attackers run code on its servers. GitLab has addressed a critical security flaw, tracked as ...

Pierluigi Paganini October 13, 2026
Hacking
Hackers cranked French supermarkets' freezers up to 50 degrees, causing hundreds of stores to lose their stock

Hackers hit French supermarkets via unpatched Danfoss refrigeration systems, remote-heating freezers and destroying stock worth millions. Overnight from Sunday to Monday, a large cyberattack hit t ...

Pierluigi Paganini October 13, 2026
Cyber Crime
ShinyHunters arrest number three: a Canadian ransomware negotiator

A Canadian ransomware negotiator faces extortion charges in the FBI's ShinyHunters crackdown. Here's what is known, and what isn't. ShinyHunters is the focus of a global FBI investigation, and the ...

Pierluigi Paganini October 12, 2026
Security
Canonical Hit by Second DDoS Attack in 2026, Public Websites Disrupted

Canonical suffered its second DDoS attack this year, disrupting public websites for over four hours while Launchpad and the Snap Store remained online. Ubuntu's parent company Canonical spent part ...

Pierluigi Paganini October 12, 2026