LATEST NEWS

VIEW ALL
The Ursnif Trojan has hit over 100 Italian banks
Pierluigi Paganini March 03, 2021

Avast researchers reported that the infamous Ursnif Trojan was employed in attacks against at least 100 banks in Italy. Avast experts recently obtained information on possible victims of Ursnif  ...

Cyber Defense Magazine – March 2021 has arrived. Enjoy it!
Pierluigi Paganini March 03, 2021

Cyber Defense Magazine March 2021 Edition has arrived. We hope you enjoy this month's edition…packed with over 110 pages of excellent content. 110 PAGESLOADED WITH EXCELLENT CONTENTLearn fro ...

Bug bounty hunter awarded $50,000 for a Microsoft account hijack flaw
Pierluigi Paganini March 03, 2021

A researcher received a $50,000 bug bounty by Microsoft for having reported a vulnerability that could've allowed to hijack any account. Microsoft has awarded the security researcher Laxman Muthiy ...

Attackers took over the Perl.com domain in September 2020
Pierluigi Paganini March 03, 2021

The Perl.com domain was hijacked in January, but a senior editor at the site revealed that the hackers took control of the domain in September 2020. The Perl.com domain was hijacked in January 2 ...

recent articles

Cyber Crime
Extortion Group FulcrumSec Claims 86GB Manchester Airports Group Data Theft

Extortion group FulcrumSec claims they stole 86GB of Manchester Airports Group data after finding API credentials exposed in client-side JavaScript. Manchester Airports Group (MAG) disclosed a dat ...

Pierluigi Paganini August 30, 2026
Malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 112

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Operation QUICSILVER: China-Nexus Actor ...

Pierluigi Paganini August 30, 2026
Uncategorized
Hackers Are Probing PaperCut Servers, and 47% Still Have No Patch

PaperCut servers are under active attack, while 47% of tracked installations still run unpatched versions vulnerable to remote code execution. PaperCut, the print management software running in sc ...

Pierluigi Paganini August 30, 2026
Security
Security Affairs newsletter Round 592 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini August 30, 2026
Hacking
Hack One Robot, Reach the Next: Unitree G1 Security Flaws

A researcher chained two Unitree G1 flaws to gain root access remotely and showed how a compromised robot could attack others nearby. Security researcher Olivier Laflamme spent about three months ...

Pierluigi Paganini August 29, 2026
Cyber Crime
Rhysida Ransomware Group Targets Berlin Government Ahead of Vote

Berlin 's government faces a Rhysida ransomware attack weeks before elections, with officials refusing to pay despite a claimed 5.79 TB data theft. Berlin's state government confirmed this week it ...

Pierluigi Paganini August 29, 2026
Intelligence
Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator

An alleged Chinese-speaking actor breached Philippine nuclear and naval targets by exploiting known flaws, stealing sensitive data. A suspected Chinese-speaking operator targeted a Philippine nucl ...

Pierluigi Paganini August 29, 2026
Data Breach
Love Electric Breach: 877,000 Driver Records Offered for $600

Love Electric's alleged data breach exposes sensitive driver data and highlights the identity risks created by third-party salary sacrifice providers. A seller on an English-language data-breach f ...

Pierluigi Paganini August 28, 2026
Security
Trump Targets Foreign Technology in New U.S. Power Grid Security Order

Trump targets foreign-made power grid equipment, citing cyber, sabotage and supply-chain risks to U.S. national security. Executive Order 14420, signed on August 26, targets equipment and technolo ...

Pierluigi Paganini August 28, 2026
Hacking
U.S. CISA adds ownCloud, Linux Kernel, and JFrog Artifactory flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds ownCloud, Linux Kernel, and JFrog Artifactory flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Inf ...

Pierluigi Paganini August 28, 2026
APT
Russian APT BlueDelta Uses HOOKEDGE to Target Defense and Diplomatic Organizations

BlueDelta (APT28) uses webhook.site and Microsoft Edge to hide HOOKEDGE espionage traffic targeting European governments. Recorded Future's Insikt Group documented a campaign by BlueDelta, the Rus ...

Pierluigi Paganini August 28, 2026
Hacking
PaperCut Zero-Day Under Active Attack: Emergency Patch Released

PaperCut warns that a zero-day in NG and MF is being exploited. The company already release emergency patches to address it. PaperCut Software warns that attackers are actively exploiting a zero-d ...

Pierluigi Paganini August 28, 2026
Hacking
U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities ...

Pierluigi Paganini August 28, 2026
Data Breach
Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports

A cyberattack on Manchester Airports Group exposed data of 8.7 million customers across Manchester, Stansted, and East Midlands airports. Manchester Airports Group disclosed that an unauthorised t ...

Pierluigi Paganini August 28, 2026
APT
Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback

Dark Caracal targets Venezuela with GoCaracal, an upgraded Bandook toolkit and an Ethereum fallback for resilient C2 communications. Dark Caracal is back with new malware and the same hunting grou ...

Pierluigi Paganini August 27, 2026
Security
Australian Police Charge Two Over TeamPCP Credential Theft

Australian police charged two men linked to TeamPCP over malware hidden in open-source code that stole 500,000+ credentials from 1,000+ organizations. Australian police have charged two men from W ...

Pierluigi Paganini August 27, 2026
Laws and regulations
Meta to Pay Up to $18B Over Teen Social Media Use

Meta will pay up to $18B and cap teen Facebook and Instagram use at two hours daily after nearly all US states sued over child safety. Meta will pay up to $18 billion over the next decade and impo ...

Pierluigi Paganini August 27, 2026
ICS-SCADA
CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do

CISA urges water utilities to find and secure internet-exposed PLCs after July attacks showed how easily exposed industrial systems can be compromised. Over 100 internet-exposed systems in the US ...

Pierluigi Paganini August 27, 2026
Intelligence
OpenAI banned Russian ChatGPT accounts backing covert influence operation

OpenAI banned Russian ChatGPT accounts backing a fake think tank, IBI, that used AI posts and a fake “sovereignty” index to push pro‑Russia narratives. OpenAI says it has banned a cluster of ...

Pierluigi Paganini August 27, 2026
Hacking
CISA Red Team Fully Compromised Two Critical Infrastructure Orgs

CISA red teams fully compromised two critical infrastructure orgs. One SOC isolated hosts in minutes; the other never detected the breach. CISA published an advisory (AA26-237A) documenting two si ...

Pierluigi Paganini August 26, 2026