MUST READ

U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog

 | 

AI Agents Attempt SQL Injection While Searching Government Data

 | 

Investigators trace an AI agent 's path from research task to reconnaissance

 | 

U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog

 | 

Operation KillSwitch: Police Dismantle KillSec Ransomware Group

 | 

Inside Gemini 4 Argon, the model Google is testing on its own infrastructure first

 | 

Public PoC Released for Apple CoreGraphics Zero-Day CVE-2026-86950

 | 

U.S. CISA adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities catalog

 | 

AI Agent Chains Zammad Zero-Days To Take Over DIVD Systems in Seconds

 | 

WatchGuard fixes critical Fireware OS flaw allowing remote code execution

 | 

Oxygen Forensics, A Russian-run forensics firm spent a decade inside European police departments

 | 

Attackers Abuse ChatGPT Custom GPTs to Deploy a Full-Featured RAT

 | 

U.S. CISA adds Apple Multiple Products flaw to its Known Exploited Vulnerabilities catalog

 | 

WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign

 | 

Japanese railway operators Keio Corporation and Tokyo Metro disclose security breaches

 | 

Three Million Affected in Pentagon Personnel Agency Data Breach

 | 

Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks

 | 

24-Year-Old Arrested in Dutch Investigation Into ShinyHunters

 | 

GPT-6 Astra and the Supply Chain Attack It Wasn’t Asked to Launch

 | 

AI Accounts Are Becoming the New Target for Infostealers

 | 

LATEST NEWS

VIEW ALL
Security
U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog
Pierluigi Paganini October 02, 2026

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency ...

Artificial Intelligence
AI Agents Attempt SQL Injection While Searching Government Data
Pierluigi Paganini October 02, 2026

AI agents probing US and Canadian government sites made SQL injection attempts while seeking data, but investigators found no evidence of compromise. Autonomous AI agents, working on what looks li ...

Artificial Intelligence
Investigators trace an AI agent 's path from research task to reconnaissance
Pierluigi Paganini October 02, 2026

Asymmetric Security traces rogue OpenAI AI agent activity that probed government sites, accessed staging servers, and evaded sandbox limits. Researchers at Asymmetric Security spent 48 hours over ...

Security
U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog
Pierluigi Paganini October 02, 2026

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency ...

top articles

Hackers access Booking.com user data, company secures systems
April 13, 2026
Inside ZionSiphon: politically driven malware aims at Israeli water systems
April 17, 2026
RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
April 23, 2026
Checkmarx supply chain attack impacts Bitwarden npm distribution path
April 24, 2026
Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed
April 26, 2026

newsletter

Subscribe to my email list and stay
up-to-date!

most popular

VIEW ALL
Security

U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog

October 02, 2026

Artificial Intelligence
AI Agents Attempt SQL Injection While Searching Government Data

October 02, 2026

Artificial Intelligence
Investigators trace an AI agent 's path from research task to reconnaissance

October 02, 2026

Security
U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog

October 02, 2026

Cyber Crime
Operation KillSwitch: Police Dismantle KillSec Ransomware Group

October 01, 2026

recent articles

Security
U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency ...

Pierluigi Paganini October 02, 2026
Artificial Intelligence
AI Agents Attempt SQL Injection While Searching Government Data

AI agents probing US and Canadian government sites made SQL injection attempts while seeking data, but investigators found no evidence of compromise. Autonomous AI agents, working on what looks li ...

Pierluigi Paganini October 02, 2026
Artificial Intelligence
Investigators trace an AI agent 's path from research task to reconnaissance

Asymmetric Security traces rogue OpenAI AI agent activity that probed government sites, accessed staging servers, and evaded sandbox limits. Researchers at Asymmetric Security spent 48 hours over ...

Pierluigi Paganini October 02, 2026
Security
U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency ...

Pierluigi Paganini October 02, 2026
Cyber Crime
Operation KillSwitch: Police Dismantle KillSec Ransomware Group

Operation KillSwitch: Europol says the KillSec ransomware group, allegedly led by a 16-year-old, was dismantled after attacks on about 1,000 victims. Law enforcement seized control of KillSec 's d ...

Pierluigi Paganini October 01, 2026
Artificial Intelligence
Inside Gemini 4 Argon, the model Google is testing on its own infrastructure first

Google unveils Gemini 4 Argon, a frontier AI model built for coding, enterprise work, and autonomous cybersecurity defense, rolling out to trusted testers. Google announced Gemini 4 Argon, and it' ...

Pierluigi Paganini October 01, 2026
Hacking
Public PoC Released for Apple CoreGraphics Zero-Day CVE-2026-86950

Apple patched a CoreGraphics zero-day that may have been exploited in targeted attacks. A public PoC for the flaw is now available. Apple patched a zero-day vulnerability, tracked as CVE-2026-8695 ...

Pierluigi Paganini October 01, 2026
Security
U.S. CISA adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Secur ...

Pierluigi Paganini October 01, 2026
Hacking
AI Agent Chains Zammad Zero-Days To Take Over DIVD Systems in Seconds

DIVD was breached through two Zammad zero-days that let an AI agent reach root in seconds, steal data and pivot to other services before being stopped. The Dutch Institute for Vulnerability Disclo ...

Pierluigi Paganini October 01, 2026
Security
WatchGuard fixes critical Fireware OS flaw allowing remote code execution

WatchGuard fixes 15 Fireware OS flaws, including a critical RCE bug that could give attackers root access to vulnerable Firebox appliances. WatchGuard has released security updates for Fireware OS ...

Pierluigi Paganini September 30, 2026
Intelligence
Oxygen Forensics, A Russian-run forensics firm spent a decade inside European police departments

DOJ charges against Oxygen Forensics reveal the Russian-linked firm also sold forensic software to EU projects and European police forces for years. Last week's Justice Department indictment of Ox ...

Pierluigi Paganini September 30, 2026
Artificial Intelligence
Attackers Abuse ChatGPT Custom GPTs to Deploy a Full-Featured RAT

Threat actors abused fake ChatGPT Custom GPTs and ClickFix to deliver a multi-stage RAT. ChatGPT's Custom GPT feature is the latest legitimate surface being turned into a delivery mechanism, and H ...

Pierluigi Paganini September 30, 2026
Security
U.S. CISA adds Apple Multiple Products flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple Multiple Products flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Ag ...

Pierluigi Paganini September 30, 2026
Security
WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign

Mandiant and GTIG detail active exploitation of a Citrix NetScaler zero-day, deploying custom web shells WHIPSHOT and SLAPSHOT for root access. Mandiant and Google Threat Intelligence Group caught ...

Pierluigi Paganini September 30, 2026
Data Breach
Japanese railway operators Keio Corporation and Tokyo Metro disclose security breaches

Keio, a major Japanese railway operator, was hit by ransomware, disrupting business systems and forcing the company to shut down its network. Keio Corporation, one of Japan’s major private railw ...

Pierluigi Paganini September 29, 2026
Uncategorized
Three Million Affected in Pentagon Personnel Agency Data Breach

Pentagon personnel agency breach exposed data of 3 million people after attackers accessed a file-sharing server for about nine months. The U.S. Defense Manpower Data Center (DMDC), which maintain ...

Pierluigi Paganini September 29, 2026
Hacking
Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks

Apple patched zero-day CVE-2026-86950 in CoreGraphics, exploited in sophisticated targeted attacks against specific iOS users. Apple has released security updates for iOS, iPadOS and macOS to fix ...

Pierluigi Paganini September 29, 2026
Cyber Crime
24-Year-Old Arrested in Dutch Investigation Into ShinyHunters

Dutch police confirm the arrest of a 24-year-old Amsterdam man as part of an investigation into the ShinyHunters hacking group. Dutch police confirmed this week that a 24-year-old man from Amsterd ...

Pierluigi Paganini September 29, 2026
Artificial Intelligence
GPT-6 Astra and the Supply Chain Attack It Wasn’t Asked to Launch

UK AISI finds GPT-6 Astra launches unsanctioned supply-chain attacks in simulations far more than earlier OpenAI models, even when told not to. The UK's AI Security Institute tested GPT-6 Astra be ...

Pierluigi Paganini September 29, 2026
Artificial Intelligence
AI Accounts Are Becoming the New Target for Infostealers

Infostealers are exposing corporate AI accounts, sessions and API keys, giving attackers access to sensitive data, compute and connected systems. SOCRadar analyzed stealer log data from the last 9 ...

Pierluigi Paganini September 28, 2026