LATEST NEWS

VIEW ALL
Crooks claim to have stolen 20k customer records from Superdrug cosmetics retailer
Pierluigi Paganini August 22, 2018

Hackers claim to have stolen the personal details of almost 20,000 Superdrug customers who shopped online at the cosmetics retailer. The British Superdrug is the last victim of a security breach, h ...

Dark Tequila Banking malware targets Latin America since 2013
Pierluigi Paganini August 22, 2018

Kaspersky Labs detected a sophisticated piece of banking malware dubbed Dark Tequila that was used to target customers of several Mexican banks. Security experts from Kaspersky Labs have spotted a s ...

Microsoft says Russian hackers continue targeting 2018 midterm elections
Pierluigi Paganini August 21, 2018

Microsoft has spotted a new hacking campaign targeting 2018 midterm elections, the experts attributed the attacks to Russia-linked APT28 group. Microsoft has spotted a new hacking campaign targeting ...

Security firm released Singularity, an open source DNS Rebinding attack tool
Pierluigi Paganini August 21, 2018

Cybersecurity firm NCC Group has released an open source tool for penetration testers that allows carrying out DNS rebinding attacks. Security firm NCC Group has released an open source tool for pe ...

recent articles

Hacking
WordPress XSS2Shell Flaw Turns Simple Login Bug Into Full Server Takeover

WordPress XSS2Shell flaw enables admin takeover and remote code execution. Users should update to patched versions. Researchers at Pwn just published a report on a vulnerability chain they're call ...

Pierluigi Paganini August 07, 2026
Security
Hackers Impersonate IT Support to Breach Leading Financial Companies

Hackers used fake IT help desks to steal MFA credentials, targeting over 200 firms, including major financial companies. A hacking campaign operating under names including Redact, Pink, Falcon, an ...

Pierluigi Paganini August 07, 2026
Laws and regulations
Meta Ordered to Pay $567 Million Over Child Safety Failures in New Mexico Case

Meta was ordered to pay $567M after a judge ruled its platforms harmed children, bringing New Mexico penalties to $942M. Meta 's child-safety legal bill just got another half-billion dollars heavi ...

Pierluigi Paganini August 07, 2026
Security
Researchers Discover Hidden Backdoor in 20 Router Models Allowing Remote Root Access

A hidden backdoor in 20 router models lets remote servers execute commands as root, putting affected devices at risk of takeover. Jacob Baines had a router on his desk that kept trying to call hom ...

Pierluigi Paganini August 07, 2026
Artificial Intelligence
AI Deepfakes Used to Impersonate OnlyFans Creators in New Scam

Scammers use AI deepfakes to impersonate OnlyFans creators, trick fans into sending money, then disappear after payment. Criminals are building fake identities using AI-generated deepfakes of real ...

Pierluigi Paganini August 07, 2026
Data Breach
Exposed SISVISA Database Leaks 102,000 Brazilian Health Surveillance Records

An exposed SISVISA database leaked 102,215 Brazilian health records, exposing IDs, tax data, and regulatory documents without authentication. Researcher Jeremiah Fowler found a publicly accessible ...

Pierluigi Paganini August 06, 2026
Cyber Crime
Ransom Cartel Leader Sentenced to 16 Years in U.S.

A U.S. court sentenced Ransom Cartel founder Maksim Silnikau to 16 years for running a ransomware-as-a-service operation. Maksim Silnikau (aka "J.P. Morgan," "lansky," and "xxx,") built a ransomwa ...

Pierluigi Paganini August 06, 2026
Security
Meta AI Model Hacked a Company During Testing, Marking Third AI Lab Incident

Meta says an AI model hacked a company during testing after accidental internet access, marking the third disclosed AI lab breach in weeks. Meta confirmed that one of its AI models breached an uni ...

Pierluigi Paganini August 06, 2026
Security
U.S. CISA adds a JetBrains TeamCity flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a JetBrains TeamCity vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Secur ...

Pierluigi Paganini August 06, 2026
Security
Snowflake Hacker Pleads Guilty After Breaching 165 Companies and Stealing Billions of Records

Snowflake hacker Connor Moucka pleads guilty after breaching 165 organizations, stealing billions of records, and extorting victims. Connor Riley Moucka, 26, of Kitchener, Ontario, pleaded guilty ...

Pierluigi Paganini August 06, 2026
Artificial Intelligence
AI Deception Emerges in Cyber Tests as Agents Target Real People and Systems

AISI found AI agents taking unsanctioned online actions, including social engineering and code attacks, during controlled cyber tests. The UK’s AI Security Institute (AISI) has put something unc ...

Pierluigi Paganini August 05, 2026
Uncategorized
Brown Health Medical Group-MA Data Breach Exposes Information of 311,000 Individuals

Brown Health Medical Group-MA breach exposed personal, medical, and financial data of over 311,000 individuals after hackers accessed its servers. Brown Health Medical Group-MA data breach exposed ...

Pierluigi Paganini August 05, 2026
Hacking
U.S. CISA adds Langflow, Apache Tomcat, and N-able N-central flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Langflow, Apache Tomcat, and N-able N-central flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Inf ...

Pierluigi Paganini August 05, 2026
Hacking
OVSwrap: 13-Year-Old Linux Kernel Flaw Lets Local Users Become Root

OVSwrap is a 13-year-old Linux kernel flaw that lets local users gain root privileges on most distributions using Open vSwitch. Security researcher Asim Manizada disclosed OVSwrap (CVE-2026-64531, ...

Pierluigi Paganini August 05, 2026
Uncategorized
SMOKE#SCREEN Campaign Abuses ScreenConnect to Give Attackers Remote Control Access

SMOKE#SCREEN uses fake Zoom updates to install ScreenConnect RMM, giving attackers persistent remote access while bypassing defenses. Securonix Threat Research has been tracking an active multi-wa ...

Pierluigi Paganini August 05, 2026
Hacking
SharePoint Flaws Used to Hack Switzerland's Federal IT Agency

Swiss Federal IT Agency FOITT says attackers exploited SharePoint flaws to compromise about 200 accounts. Servers are being rebuilt as investigations continue. Switzerland's Federal Office for Inf ...

Pierluigi Paganini August 04, 2026
Malware
INC Ransomware is Calling Victims - Pressure Tactics Post SonicWall Zero-Day Exploit

INC Ransomware exploits SonicWall SMA 1000 flaws, using calls and emails to pressure victims during extortion campaigns targeting global organizations. Resecurity disclosed that INC Ransomware has ...

Pierluigi Paganini August 04, 2026
Security
CVE-2026-58048: cPanel Bug Enables Full Database Administrator Access

A critical cPanel flaw (CVE-2026-58048) lets authenticated users execute SQL as root. Users should update to fixed versions immediately. If you run a shared hosting box, this one's worth reading b ...

Pierluigi Paganini August 04, 2026
Security
U.S. CISA adds a N-able N-central flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a N-able N-central flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency ...

Pierluigi Paganini August 04, 2026
Cyber Crime
31,000 Records Compromised in Breach of Liechtenstein Companies and Foundations Register

Cyberattack exposed data of 31,000 people in Liechtenstein's beneficial ownership register for companies and foundations. A cyberattack compromised data belonging to about 31,000 people in Liechte ...

Pierluigi Paganini August 04, 2026