LATEST NEWS

VIEW ALL
US Gov sanctions Russia and expels 10 diplomats over SolarWinds hack
Pierluigi Paganini April 15, 2021

The U.S. and UK attributed with "high confidence" the recently disclosed supply chain attack on SolarWinds to Russia's Foreign Intelligence Service (SVR). The U.S. and U.K. attributed with "high c ...

Cyber thieves move $760 million stolen in the 2016 Bitfinex heist
Pierluigi Paganini April 15, 2021

Over $760 million worth of Bitcoin that were stolen from cryptocurrency exchange Bitfinex in 2016 were moved to new accounts. More than $760 million worth of Bitcoin, stolen from Asian cryptocurre ...

April 2021 Security Patch Day fixes a critical flaw in SAP Commerce
Pierluigi Paganini April 15, 2021

April 2021 Security Patch Day includes 14 new security notes and 5 updates to previously released notes, one of them fixes a critical issue in SAP Commerce. April 2021 Security Patch Day includes ...

For the second time in a week, a Google Chromium zero-day released online
Pierluigi Paganini April 15, 2021

For the second time in a week, a Chromium zero-day remote code execution exploit code has been released on Twitter, multiple browsers impacted. A new Chromium zero-day remote code execution expl ...

recent articles

Security
New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia

A new wave of fridge cyberattacks hit supermarket refrigeration systems across five European countries, raising temperatures and causing food losses. A new wave of fridge cyberattacks has affected ...

Pierluigi Paganini November 02, 2026
Security
Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens

Hackers reportedly hit Ukraine 's and Russia 's emergency alert apps, sending fake nuclear and attack warnings and raising concerns over public safety. Ukraine and Russia both said on Sunday night ...

Pierluigi Paganini November 02, 2026
Artificial Intelligence
Chainalysis Investigates Security Incident Involving AI-Driven Attack Techniques

Chainalysis suffered a cyberattack exposing customer names, emails and user IDs, while investigation data and passwords remain safe. Blockchain analytics firm Chainalysis says it was the target of ...

Pierluigi Paganini November 02, 2026
APT
FBI Blames North Korea for $6 Billion Binance Crypto Theft

The FBI blames North Korea for stealing $6 billion from Binance and urges crypto firms to block transactions linked to the stolen funds. The FBI has named North Korea as the party behind the theft ...

Pierluigi Paganini November 01, 2026
Artificial Intelligence
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 6

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, ...

Pierluigi Paganini November 01, 2026
Malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 121

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter uCreator: virtualization-based Android s ...

Pierluigi Paganini November 01, 2026
Breaking News
Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini November 01, 2026
Security
SMS of Death: Android under attack, an invisible SMS can block calls and emergency services

SMS of Death lets attackers crash Android call services with a hidden, zero-click message, blocking phone calls, even emergency calls too. A specially manipulated SMS message is enough to crash An ...

Pierluigi Paganini November 01, 2026
Security
U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Age ...

Pierluigi Paganini October 31, 2026
Security
Attackers Exploit Critical Drupal Commerce Core Vulnerability CVE-2026-118539

Drupal warns that attackers are exploiting a critical authorization flaw in Commerce Core, putting vulnerable online stores at risk. Drupal warns that threat actors are exploiting a highly critica ...

Pierluigi Paganini October 31, 2026
Malware
Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries

Yoba malware uses fake ChatGPT and Claude apps to sideload malware through signed installers and deploy a cryptocurrency miner. Check Point Research has spent two months tracking a campaign it cal ...

Pierluigi Paganini October 30, 2026
Security
U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency ...

Pierluigi Paganini October 30, 2026
Cyber Crime
$6.3 Billion Stolen from Binance in Attack Attributed to North Korea

Binance links a $6.3 billion crypto theft to a compromised DevOps laptop, with North Korean hackers blamed by blockchain analysts. Binance was investigating suspicious transfers that early estimat ...

Pierluigi Paganini October 30, 2026
Hacking
How to prioritize remediation after a pentest: a practitioner workflow

A practical pentest workflow combines CVSS, EPSS and business impact to validate findings, prioritize fixes and document remediation decisions. Remediation prioritization after a pentest is the pr ...

Pierluigi Paganini October 30, 2026
Data Breach
Hacker leaks data on more than 40,000 Homeland Security employees

A hacker leaks personal data on more than 40,000 DHS employees, including CBP, ICE and CISA staff, after an undisclosed breach. Personal details of thousands of U.S. Department of Homeland Securit ...

Pierluigi Paganini October 30, 2026
Hacking
Binance Investigates Suspicious Crypto Transfers Worth Up to $5.8 Billion

Binance probes suspicious crypto transfers worth up to $5.8 billion as Tether and Circle freeze $1.79 billion in stablecoins linked to the activity. Binance is investigating a potential security i ...

Pierluigi Paganini October 29, 2026
Hacking
US Probes Suspected Hack Behind Military Base Freezer Failures

The Pentagon treats August freezer failures at US military bases as a suspected hack and is working with French investigators after a supermarket attack. The Pentagon is investigating freezer fail ...

Pierluigi Paganini October 29, 2026
Security
484,142 Exposed Cloud Buckets Contain 18 Billion Files

42 publicly listable cloud buckets containing 18 billion files, including exposed credentials, database dumps and backups. The Ransomnews research team counted 484,142 publicly listable cloud stor ...

Pierluigi Paganini October 29, 2026
Hacking
U.S. CISA adds Linux Kernel and Broadcom VMWare ESX  flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux Kernel and Broadcom VMWare ESX flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastruct ...

Pierluigi Paganini October 29, 2026
Intelligence
Volt Typhoon Used Silent Train to Hide Zero-Day Attacks

Volt Typhoon used disposable relay chains to hide zero-day attacks on critical systems. Lumen linked Silent Train to at least four zero-days. Lumen’s Black Lotus Labs has spent three years track ...

Pierluigi Paganini October 29, 2026