MUST READ

U.S. CISA adds a JetBrains TeamCity flaw to its Known Exploited Vulnerabilities catalog

 | 

Snowflake Hacker Pleads Guilty After Breaching 165 Companies and Stealing Billions of Records

 | 

AI Deception Emerges in Cyber Tests as Agents Target Real People and Systems

 | 

Brown Health Medical Group-MA Data Breach Exposes Information of 311,000 Individuals

 | 

U.S. CISA adds Langflow, Apache Tomcat, and N-able N-central flaws to its Known Exploited Vulnerabilities catalog

 | 

OVSwrap: 13-Year-Old Linux Kernel Flaw Lets Local Users Become Root

 | 

SMOKE#SCREEN Campaign Abuses ScreenConnect to Give Attackers Remote Control Access

 | 

SharePoint Flaws Used to Hack Switzerland's Federal IT Agency

 | 

INC Ransomware is Calling Victims - Pressure Tactics Post SonicWall Zero-Day Exploit

 | 

CVE-2026-58048: cPanel Bug Enables Full Database Administrator Access

 | 

U.S. CISA adds a N-able N-central flaw to its Known Exploited Vulnerabilities catalog

 | 

31,000 Records Compromised in Breach of Liechtenstein Companies and Foundations Register

 | 

AI Runs the Hack: Chinese Actor Automates Cyberattacks With DeepSeek

 | 

River Bank obtained assurances from the attackers that the stolen data in the June attack was deleted

 | 

PNLD Confirms Data Breach Affecting UK Police and Justice Staff

 | 

Alleged Żabka Breach Exposes Jira Data, Source Code, and API Keys

 | 

Ruby on Rails Patches Critical Active Storage Vulnerability Affecting Image Processing

 | 

CareCloud Breach Exposes Medical and Financial Data of 345,000

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 108

 | 

Security Affairs newsletter Round 588 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

LATEST NEWS

VIEW ALL
Security
U.S. CISA adds a JetBrains TeamCity flaw to its Known Exploited Vulnerabilities catalog
Pierluigi Paganini August 06, 2026

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a JetBrains TeamCity vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Secur ...

Security
Snowflake Hacker Pleads Guilty After Breaching 165 Companies and Stealing Billions of Records
Pierluigi Paganini August 06, 2026

Snowflake hacker Connor Moucka pleads guilty after breaching 165 organizations, stealing billions of records, and extorting victims. Connor Riley Moucka, 26, of Kitchener, Ontario, pleaded guilty ...

Artificial Intelligence
AI Deception Emerges in Cyber Tests as Agents Target Real People and Systems
Pierluigi Paganini August 05, 2026

AISI found AI agents taking unsanctioned online actions, including social engineering and code attacks, during controlled cyber tests. The UK’s AI Security Institute (AISI) has put something unc ...

Uncategorized
Brown Health Medical Group-MA Data Breach Exposes Information of 311,000 Individuals
Pierluigi Paganini August 05, 2026

Brown Health Medical Group-MA breach exposed personal, medical, and financial data of over 311,000 individuals after hackers accessed its servers. Brown Health Medical Group-MA data breach exposed ...

top articles

Hackers access Booking.com user data, company secures systems
April 13, 2026
Inside ZionSiphon: politically driven malware aims at Israeli water systems
April 17, 2026
RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
April 23, 2026
Checkmarx supply chain attack impacts Bitwarden npm distribution path
April 24, 2026
Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed
April 26, 2026

newsletter

Subscribe to my email list and stay
up-to-date!

most popular

VIEW ALL
Security

U.S. CISA adds a JetBrains TeamCity flaw to its Known Exploited Vulnerabilities catalog

August 06, 2026

Security
Snowflake Hacker Pleads Guilty After Breaching 165 Companies and Stealing Billions of Records

August 06, 2026

Artificial Intelligence
AI Deception Emerges in Cyber Tests as Agents Target Real People and Systems

August 05, 2026

Uncategorized
Brown Health Medical Group-MA Data Breach Exposes Information of 311,000 Individuals

August 05, 2026

Hacking
U.S. CISA adds Langflow, Apache Tomcat, and N-able N-central flaws to its Known Exploited Vulnerabilities catalog

August 05, 2026

recent articles

Security
U.S. CISA adds a JetBrains TeamCity flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a JetBrains TeamCity vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Secur ...

Pierluigi Paganini August 06, 2026
Security
Snowflake Hacker Pleads Guilty After Breaching 165 Companies and Stealing Billions of Records

Snowflake hacker Connor Moucka pleads guilty after breaching 165 organizations, stealing billions of records, and extorting victims. Connor Riley Moucka, 26, of Kitchener, Ontario, pleaded guilty ...

Pierluigi Paganini August 06, 2026
Artificial Intelligence
AI Deception Emerges in Cyber Tests as Agents Target Real People and Systems

AISI found AI agents taking unsanctioned online actions, including social engineering and code attacks, during controlled cyber tests. The UK’s AI Security Institute (AISI) has put something unc ...

Pierluigi Paganini August 05, 2026
Uncategorized
Brown Health Medical Group-MA Data Breach Exposes Information of 311,000 Individuals

Brown Health Medical Group-MA breach exposed personal, medical, and financial data of over 311,000 individuals after hackers accessed its servers. Brown Health Medical Group-MA data breach exposed ...

Pierluigi Paganini August 05, 2026
Hacking
U.S. CISA adds Langflow, Apache Tomcat, and N-able N-central flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Langflow, Apache Tomcat, and N-able N-central flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Inf ...

Pierluigi Paganini August 05, 2026
Hacking
OVSwrap: 13-Year-Old Linux Kernel Flaw Lets Local Users Become Root

OVSwrap is a 13-year-old Linux kernel flaw that lets local users gain root privileges on most distributions using Open vSwitch. Security researcher Asim Manizada disclosed OVSwrap (CVE-2026-64531, ...

Pierluigi Paganini August 05, 2026
Uncategorized
SMOKE#SCREEN Campaign Abuses ScreenConnect to Give Attackers Remote Control Access

SMOKE#SCREEN uses fake Zoom updates to install ScreenConnect RMM, giving attackers persistent remote access while bypassing defenses. Securonix Threat Research has been tracking an active multi-wa ...

Pierluigi Paganini August 05, 2026
Hacking
SharePoint Flaws Used to Hack Switzerland's Federal IT Agency

Swiss Federal IT Agency FOITT says attackers exploited SharePoint flaws to compromise about 200 accounts. Servers are being rebuilt as investigations continue. Switzerland's Federal Office for Inf ...

Pierluigi Paganini August 04, 2026
Malware
INC Ransomware is Calling Victims - Pressure Tactics Post SonicWall Zero-Day Exploit

INC Ransomware exploits SonicWall SMA 1000 flaws, using calls and emails to pressure victims during extortion campaigns targeting global organizations. Resecurity disclosed that INC Ransomware has ...

Pierluigi Paganini August 04, 2026
Security
CVE-2026-58048: cPanel Bug Enables Full Database Administrator Access

A critical cPanel flaw (CVE-2026-58048) lets authenticated users execute SQL as root. Users should update to fixed versions immediately. If you run a shared hosting box, this one's worth reading b ...

Pierluigi Paganini August 04, 2026
Security
U.S. CISA adds a N-able N-central flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a N-able N-central flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency ...

Pierluigi Paganini August 04, 2026
Cyber Crime
31,000 Records Compromised in Breach of Liechtenstein Companies and Foundations Register

Cyberattack exposed data of 31,000 people in Liechtenstein's beneficial ownership register for companies and foundations. A cyberattack compromised data belonging to about 31,000 people in Liechte ...

Pierluigi Paganini August 04, 2026
Artificial Intelligence
AI Runs the Hack: Chinese Actor Automates Cyberattacks With DeepSeek

Unit 42 uncovered an AI-driven Chinese hacking campaign where DeepSeek autonomously scanned targets, selected exploits, and launched attacks. Researchers at Palo Alto's Unit 42 got a front-row sea ...

Pierluigi Paganini August 03, 2026
Cyber Crime
River Bank obtained assurances from the attackers that the stolen data in the June attack was deleted

River Bank says hackers deleted data stolen in its June ransomware attack, though the investigation into the incident is still ongoing. River Financial Corporation, the parent company of River Ban ...

Pierluigi Paganini August 03, 2026
Data Breach
PNLD Confirms Data Breach Affecting UK Police and Justice Staff

UK police legal database breach exposed officers' names and work emails, increasing phishing risks. NCA is investigating. The Police National Legal Database (PNLD), the legal reference system used ...

Pierluigi Paganini August 03, 2026
Data Breach
Alleged Żabka Breach Exposes Jira Data, Source Code, and API Keys

Alleged Żabka data leak offered for €5,000 includes Jira data, GitLab repos, and secrets; researchers verified much of the sample. A brand-new forum account showed up on August 2, posted once, ...

Pierluigi Paganini August 03, 2026
Security
Ruby on Rails Patches Critical Active Storage Vulnerability Affecting Image Processing

Ruby on Rails fixed a critical vulnerability that could let unauthenticated attackers read files and achieve remote code execution. Ruby on Rails has patched CVE-2026-66066, a critical vulnerabili ...

Pierluigi Paganini August 03, 2026
Cyber Crime
CareCloud Breach Exposes Medical and Financial Data of 345,000

CareCloud disclosed a breach affecting 345,000 people after hackers stole medical and financial data from its AWS-hosted systems. TechCrunch reports that CareCloud, the New Jersey-based health tec ...

Pierluigi Paganini August 02, 2026
Security
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 108

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter TAG-195 Upgrades MaaS Ecosystem with Mod ...

Pierluigi Paganini August 02, 2026
Security
Security Affairs newsletter Round 588 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini August 02, 2026