LATEST NEWS

VIEW ALL
The author of the Sigrun Ransomware decrypts Russian victims' files for free
Pierluigi Paganini June 05, 2018

The author of the Sigrun Ransomware is providing the decryption key to Russian victims for free, others have to pay a ransom of $2,500 worth of Bitcoin or Dash for the victims. We have reported seve ...

Over 115,000 Drupal Sites still vulnerable to Drupalgeddon2, a gift to crooks
Pierluigi Paganini June 05, 2018

Two months after the release of the security updates for the drupalgeddon2 flaw, experts continue to see vulnerable websites running on flawed versions of Drupal that hasn't installed security patches ...

Iron cybercrime group uses a new Backdoor based on HackingTeam’s RCS surveillance sw
Pierluigi Paganini June 05, 2018

Security experts at security firm Intezer have recently discovered backdoor, associated with the operation of the Iron cybercrime group, that is based on the leaked source code of Remote Control Syste ...

NYT: Facebook APIs gave device makers deep access to user data. FB disagrees
Pierluigi Paganini June 04, 2018

  Facebook APIs granted access to the data belonging to FB users to more than 60 device makers, including Amazon, Apple, Microsoft, Blackberry, and Samsung so that they could implement Facebook ...

recent articles

Security
The Microsoft Outage Left 15 Hotel Guests Poisoned by Chlorine

A Microsoft 365 outage stopped a hotel’s email chlorine alert in Germany, and 15 guests were poisoned. A hotel in Germany had a maintenance safety system for its sauna area. If the chlorine lev ...

Pierluigi Paganini November 15, 2026
Laws and regulations
Meta Fined €805 Million in Italy Over Facebook’s Default Photo Gallery Access

Italy fines Meta €805 million over Facebook's access to Android users' photo galleries without specific consent, affecting around 20 million people. Italy’s data protection authority, the Gara ...

Pierluigi Paganini November 15, 2026
Artificial Intelligence
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 8

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, ...

Pierluigi Paganini November 15, 2026
Malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 123

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Exchange for breakfast: Turla’s Cereal ...

Pierluigi Paganini November 15, 2026
Breaking News
Security Affairs newsletter Round 604 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini November 15, 2026
Data Breach
Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France

A cyberattack on La Poste subsidiary Maileva exposed the names and postal addresses of 22 million people, including patients and tenants. Maileva, a subsidiary of the La Poste group, was hit in mi ...

Pierluigi Paganini November 15, 2026
Cyber Crime
Extortion Group Claims Theft of Nearly One Billion Expedia Traveler Records

Russian extortion group n0n claims to have stolen nearly one billion Expedia traveler records through a compromised third-party provider. A newly formed Russian cyber extortion group called n0n cl ...

Pierluigi Paganini November 14, 2026
Hacking
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Securit ...

Pierluigi Paganini November 14, 2026
Cyber Crime
North Korea 's Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure

The DOJ seized over $1.2 billion from North Korea 's Binance theft, and says the same hackers are targeting open-source developers The U.S. Department of Justice announced two separate but connect ...

Pierluigi Paganini November 13, 2026
Cyber Crime
Gootloader Malware Disrupted After Infecting 25,000 Computers

International law enforcement disrupts Gootloader, seizing domains and taking down over 100 servers linked to 25,000 infected computers. The U.S. Department of Justice announced that law enforceme ...

Pierluigi Paganini November 13, 2026
Hacking
Unpatched Check Point Gateways Are Being Wiped exploiting PHP2Shell

Unpatched Check Point gateways were hacked worldwide, leading to root access, backdoors, network intrusion and destructive wiper attacks. Starting on 30 October, an attacker scanned and exploited ...

Pierluigi Paganini November 13, 2026
Hacking
New SignDrop Exploit Can Abuse Windows Defender to Bypass Security Protections

SignDrop is a Windows zero-day that abuses CLFS security protections to let local attackers gain SYSTEM privileges and bypass defenses. The researcher Chaotic Eclipse, also known as INFINITE NIGH ...

Pierluigi Paganini November 13, 2026
Security
The School Bomb Threats Came From Accounts Already in Stolen Data

Hudson Rock researchers found that two university addresses tied to Italy's school bomb threats were in infostealer data. On 11 November, bomb-threat emails hit schools across Europe. ANSA, citing ...

Pierluigi Paganini November 12, 2026
Security
Microsoft Cloud Outage Hits Outlook, Teams, Copilot and AI Services

A Microsoft outage disrupted Outlook, Teams and Copilot, also breaking OpenAI and Anthropic connectors to Microsoft 365 accounts. Microsoft 365, Outlook and Teams went down for thousands of US use ...

Pierluigi Paganini November 12, 2026
Malware
Predator, Pegasus and Graphite: Governments Accused of Spyware Abuse Face Little Accountability

Europe's spyware victims face years of legal battles and few answers as governments shield surveillance behind national security. Greek journalist Thanasis Koukakis waited almost five years for a ...

Pierluigi Paganini November 12, 2026
Security
Zoom Fixes Critical Windows Vulnerability Allowing Privilege Escalation

Zoom fixes two Windows Workplace flaws, including a critical bug that could let unauthenticated attackers remotely escalate privileges. Zoom has released security updates to fix two vulnerabilitie ...

Pierluigi Paganini November 12, 2026
Security
Poland takes its national e-government platform offline after a cyberattack

Poland takes its e-government platform ePUAP offline after stopping a cyberattack, disrupting access to public services. Poland temporarily shut down ePUAP, the government platform citizens and bu ...

Pierluigi Paganini November 12, 2026
Hacking
AI Pentest Tool AntiFox Abused To Steal AWS Credentials

Arctic Wolf saw attackers use the AntiFox pentest platform to hit IIS servers and AWS accounts. Arctic Wolf Labs has published research on attackers using AntiFox, an open-source, Chinese-language ...

Pierluigi Paganini November 11, 2026
Data Breach
WhiteArmor Demands $5 Million from Maersk, Claims Theft of 100GB of Data

Maersk confirms a data breach involving a legacy system, while WhiteArmor claims 100GB of stolen data and demands a $5 million ransom. A.P. Moller Maersk, the Danish shipping giant, says it identi ...

Pierluigi Paganini November 11, 2026
Malware
Hackers Advertise a $1,000 Gmail Tool That Allegedly Survives Password Resets

Hackers advertise a $1,000-a-month tool claiming persistent Gmail access after password resets, but its effectiveness remains unverified. A developer of hacking tools is selling a $1,000 per month ...

Pierluigi Paganini November 11, 2026