MUST READ

U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog

 | 

F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks

 | 

ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack

 | 

EvilTokens made phishing-as-a-service look easy. Then it got taken down

 | 

Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools

 | 

CVE-2026-87902: how close is your WordPress to remote code execution?

 | 

Check Point Fixes a New Actively Exploited Critical Security Flaw

 | 

Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day

 | 

Public PoC Exposes Critical Veeam Agent Privilege Escalation

 | 

U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog

 | 

Contagious Interview: 30,000 devices infected by a fake job interview

 | 

Google Fined €403 Million Over Location Data Practices

 | 

Foreign Hackers Target Two Colorado Water Utilities

 | 

ChainScript: the RAT that hides its command server inside a blockchain contract

 | 

A BYD Shark 6 Hack Shows the Risks of Connected Cars

 | 

The Target Is No Longer the Model. It’s the Agent.

 | 

UK Police Data Faces Long-Standing Microsoft Cloud Security Concerns

 | 

U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog

 | 

AI Hallucinations Nearly Triggered a US-China Military Confrontation

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 115

 | 

LATEST NEWS

VIEW ALL
Malware
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools
Pierluigi Paganini September 23, 2026

Attackers spoofed LastPass on GitHub, used a Microsoft-signed driver to disable 145 security products, then deployed an infostealer. Someone impersonated LastPass on GitHub, got users to download ...

Hacking
CVE-2026-87902: how close is your WordPress to remote code execution?
Pierluigi Paganini September 23, 2026

WordPress 7.1.2 fixes an unauthenticated file inclusion bug active since version 4.7, patchable but exploitable into remote code execution. WordPress 7.1.2 shipped on September 22 address an unaut ...

Security
Check Point Fixes a New Actively Exploited Critical Security Flaw
Pierluigi Paganini September 22, 2026

Check Point fixes an actively exploited flaw that lets unauthenticated attackers upload and run scripts on vulnerable Security Management Servers. Check Point has released emergency hotfixes for C ...

Hacking
Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day
Pierluigi Paganini September 22, 2026

The researcher Chaotic Eclipse released BigDiskBuster, a PoC exploit for a Windows Defender Update DoS Zero-Day vulnerability. Security researcher Chaotic Eclipse, also known as INFINITE NIG ...

top articles

Hackers access Booking.com user data, company secures systems
April 13, 2026
Inside ZionSiphon: politically driven malware aims at Israeli water systems
April 17, 2026
RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
April 23, 2026
Checkmarx supply chain attack impacts Bitwarden npm distribution path
April 24, 2026
Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed
April 26, 2026

newsletter

Subscribe to my email list and stay
up-to-date!

most popular

VIEW ALL
Hacking

U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog

September 23, 2026

Security
F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks

September 23, 2026

Cyber Crime
ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack

September 23, 2026

Cyber Crime
EvilTokens made phishing-as-a-service look easy. Then it got taken down

September 23, 2026

Malware
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools

September 23, 2026

recent articles

Hacking
U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog. The U.S. ...

Pierluigi Paganini September 23, 2026
Security
F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks

F5 warns of a critical BIG-IP APM zero-day, CVE-2026-94127, allowing remote code execution. Attackers are already exploiting it. F5 has released emergency security updates for a critical vulnerabi ...

Pierluigi Paganini September 23, 2026
Cyber Crime
ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack

ShinyHunters claims FBI breach via PeopleSoft zero-day, steals staff data; FBI investigating, no confirmation yet. The popular cybercrime group ShinyHunters is claiming that it breached the U.S. F ...

Pierluigi Paganini September 23, 2026
Cyber Crime
EvilTokens made phishing-as-a-service look easy. Then it got taken down

Microsoft, Coinbase and law enforcement took down EvilTokens, a phishing kit that compromised 12,000 inboxes through device-code phishing and AI. EvilTokens showed up in February 2026 and moved fa ...

Pierluigi Paganini September 23, 2026
Malware
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools

Attackers spoofed LastPass on GitHub, used a Microsoft-signed driver to disable 145 security products, then deployed an infostealer. Someone impersonated LastPass on GitHub, got users to download ...

Pierluigi Paganini September 23, 2026
Hacking
CVE-2026-87902: how close is your WordPress to remote code execution?

WordPress 7.1.2 fixes an unauthenticated file inclusion bug active since version 4.7, patchable but exploitable into remote code execution. WordPress 7.1.2 shipped on September 22 address an unaut ...

Pierluigi Paganini September 23, 2026
Security
Check Point Fixes a New Actively Exploited Critical Security Flaw

Check Point fixes an actively exploited flaw that lets unauthenticated attackers upload and run scripts on vulnerable Security Management Servers. Check Point has released emergency hotfixes for C ...

Pierluigi Paganini September 22, 2026
Hacking
Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day

The researcher Chaotic Eclipse released BigDiskBuster, a PoC exploit for a Windows Defender Update DoS Zero-Day vulnerability. Security researcher Chaotic Eclipse, also known as INFINITE NIG ...

Pierluigi Paganini September 22, 2026
Security
Public PoC Exposes Critical Veeam Agent Privilege Escalation

A Veeam Agent flaw lets local users gain SYSTEM privileges. A public PoC is available, raising the risk of exploitation on shared Windows systems. If you're running Veeam Agent on a Windows endpoi ...

Pierluigi Paganini September 22, 2026
Hacking
U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Zyxel flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added ...

Pierluigi Paganini September 22, 2026
Uncategorized
Contagious Interview: 30,000 devices infected by a fake job interview

North Korea-linked WaterPlum runs the Contagious Interview campaign, infecting over 30,000 devices using a fake job interview. On September 18, Japan's National Police Agency, the FBI, the US Depa ...

Pierluigi Paganini September 22, 2026
Laws and regulations
Google Fined €403 Million Over Location Data Practices

Ireland’s DPC fined Google €403 million over GDPR violations involving location data, transparency, retention and user control. Ireland's Data Protection Commission (DPC) just fined Google € ...

Pierluigi Paganini September 21, 2026
ICS-SCADA
Foreign Hackers Target Two Colorado Water Utilities

Hackers targeted two Colorado water utilities, changing OT settings and disabling alarms, but causing no impact on water services or safety. Foreign hackers targeted the operational technology (OT ...

Pierluigi Paganini September 21, 2026
Malware
ChainScript: the RAT that hides its command server inside a blockchain contract

Blackpoint uncovers ChainScript, a Node.js RAT that queries a Polygon smart contract to find and rotate its command server. Blackpoint's Adversary Pursuit Group was chasing a ClickFix campaign spr ...

Pierluigi Paganini September 21, 2026
Hacking
A BYD Shark 6 Hack Shows the Risks of Connected Cars

A BYD Shark 6 was remotely hacked, exposing vehicle controls, location tracking and cabin audio, raising serious connected-car security concerns. A journalist drove a BYD Shark 6 down a country ro ...

Pierluigi Paganini September 21, 2026
Artificial Intelligence
The Target Is No Longer the Model. It’s the Agent.

AI agents are becoming the new attack surface, exposed to poisoned skills, prompt injection, jailbreaks and attacks through connected tools. I read the AI security research published in a single m ...

Pierluigi Paganini September 21, 2026
Uncategorized
UK Police Data Faces Long-Standing Microsoft Cloud Security Concerns

A 2017 UK assessment warned that police data on Microsoft Azure could face foreign access risks. The risks may still exist. A Guardian investigation has surfaced a 2017 document signed off by then ...

Pierluigi Paganini September 21, 2026
Security
U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CIS ...

Pierluigi Paganini September 20, 2026
Artificial Intelligence
AI Hallucinations Nearly Triggered a US-China Military Confrontation

An AI-generated intelligence report falsely identified weapons on a Chinese ship, nearly triggering a US military operation during the Iran war. According to CNN, four sources familiar with the ep ...

Pierluigi Paganini September 20, 2026
Malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 115

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Gray Rabbits and the Tale of a One-Click ...

Pierluigi Paganini September 20, 2026