LATEST NEWS

VIEW ALL
Multiple models of IP-based cameras from Chinese firm Foscam could be easily hacked. Update the firmware now!
Pierluigi Paganini June 08, 2018

A security vulnerability was discovered in webcams, IP surveillance cameras and also baby monitors manufactured by the Chinese firm Foscam. The Chinese firm Foscam has released firmware updates to a ...

Facebook confirms privacy settings glitch in a new feature exposed private posts of 14 Million users
Pierluigi Paganini June 08, 2018

Facebook admitted that a bug affecting its platform caused the change of the settings of some 14 million users, potentially exposing their private posts to the public. This is the worst period in the ...

Russia-linked Sofacy APT group adopts new tactics and tools in last campaign
Pierluigi Paganini June 07, 2018

Sofacy APT group (APT28, Pawn Storm, Fancy Bear, Sednit, Tsar Team, and Strontium) continues to operate and thanks to rapid and continuously changes of tactics the hackers are able to remain und ...

Adobe fixed the CVE-2018-5002 Flash Zero-Day exploited in targeted attacks in the Middle East
Pierluigi Paganini June 07, 2018

Adobe has recently fixed several vulnerabilities, including the CVE-2018-5002 Flash Zero-Day exploited in targeted attacks in the Middle East Adobe has released security updates for Flash Player that ...

recent articles

Intelligence
Volt Typhoon Used Silent Train to Hide Zero-Day Attacks

Volt Typhoon used disposable relay chains to hide zero-day attacks on critical systems. Lumen linked Silent Train to at least four zero-days. Lumen’s Black Lotus Labs has spent three years track ...

Pierluigi Paganini October 29, 2026
Security
Election Website Security: 42% of US County Sites Still Lack .gov Domains

US election websites show improved security, but weak email protection, non-.gov domains and third-party tracking still expose voters to risks. Millions of Americans will use websites to check the ...

Pierluigi Paganini October 29, 2026
Data Breach
ENGIE Data Breach Exposes Customer Details and Energy Contracts

ENGIE says attackers accessed French customers' contact and energy contract data through a partner sales tool. Banking data was not affected. French multinational energy company ENGIE warned custo ...

Pierluigi Paganini October 29, 2026
Cyber Crime
Virtualine Domain Seized, but Allegedly Abusive Website Remains Online

The FBI seized Virtualine, a hosting service accused of supporting criminal sites, ignoring abuse reports and helping launder money from illegal activities The FBI seized the website of Virtualine ...

Pierluigi Paganini October 29, 2026
Intelligence
Ads or Surveillance? Researchers Flag Suspicious Targeting of Starlink Users

Discover-Tech allegedly targeted Starlink users with digital ads to track their locations, according to sources cited in a new Reuters report. Digital defense firm TrendAI found that an Israeli ad ...

Pierluigi Paganini October 28, 2026
Security
CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers

CVE-2026-97631: A 16-year-old UEFI flaw (CVSS score of 9.5/10) enables pre-OS code execution. Exposed servers need firmware patches and checks. A critical flaw, tracked as CVE-2026-97631 (CVSS sco ...

Pierluigi Paganini October 28, 2026
Security
U.S. CISA adds Google Brotli and Adobe Commerce and Magento flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Brotli and Adobe Commerce and Magento flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and ...

Pierluigi Paganini October 28, 2026
Artificial Intelligence
Three Japan-Focused Cyberattacks Show How Hackers Use AI

Three Japan-focused cyberattacks show how AI helps hackers scale operations, while exploiting old systems and weak security remains key. In autumn 2026, Japanese companies and other organizations ...

Pierluigi Paganini October 28, 2026
Hacking
Italy ’s Parliament Under Cyber Pressure: Why the Attack on the Chamber Matters

Italy ’s Parliament cyberattack highlights hybrid warfare risks and the need for transparency, stronger defenses and accountability. The cyberattack targeting email accounts at Italy’s Chamber ...

Pierluigi Paganini October 27, 2026
Artificial Intelligence
Australia's Cyber Spy Chief: Expect More Disruption as AI Accelerates Hacking

Australia’s cyber agency warns AI will drive more disruptive attacks, helping hackers find vulnerabilities faster and exploit them at greater scale. Australia's top cyber spy has a blunt message ...

Pierluigi Paganini October 27, 2026
Security
U.S. CISA adds PHP flaws PHP2Shell to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds PHP flaws PHP2Shell to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CIS ...

Pierluigi Paganini October 27, 2026
Hacking
Attackers Take Control of Dahua Cameras and Video Recorders Via Easy4IP

Ukraine warns that attackers can remotely access Dahua cameras and recorders via Easy4IP, viewing video and changing settings. Ukraine's cyber incident response team CERT-UA has warned about attac ...

Pierluigi Paganini October 27, 2026
Artificial Intelligence
Cohere Finds Qwen AI Model Contacting a Server in China

Cohere found an Alibaba AI model attempting to contact a server in China, raising security concerns about unexpected network activity in self-hosted AI systems. A report from Cohere says an Alibab ...

Pierluigi Paganini October 27, 2026
Malware
Magento Campaign Infects 953 Online Stores Across Five Domains

Sansec tracks a Magento skimmer campaign that infected 953 stores, using five domains, bot filtering and malicious code hidden in CMS blocks. A criminal group has infected 953 online stores since ...

Pierluigi Paganini October 26, 2026
Cyber Crime
AI-Generated Fake Bank Calls and NFC App Enabled €380,000 Fraud, Dutch Police Say

Dutch police arrest two men over AI-voiced bank fraud that allegedly used a fake app to steal card data from 170 victims, causing €380,000 in losses. Rotterdam police have arrested two men over ...

Pierluigi Paganini October 26, 2026
Malware
Researchers Uncover Rentable Android Spyware uCreater Targeting WeChat and Telegram

uCreater is Android spyware disguised as trusted apps, stealing credentials, messages and wallet data through a rentable platform. uCreater is a rentable Android spyware platform that hides inside ...

Pierluigi Paganini October 26, 2026
Hacking
PHP2Shell: Suspected North Korean campaign targets 216 vulnerable PHP hosts

Cyfirma links PHP2Shell scans of 216 vulnerable hosts to a suspected North Korean campaign using AI to rank public exploits. On October 21, PHP released emergency patches for two critical vulnera ...

Pierluigi Paganini October 26, 2026
Artificial Intelligence
Anthropic reveals how Claude Mythos 5 crossed security testing boundaries

Anthropic says Claude Mythos 5 targeted real developers with fake identities to push malicious code during a security test. A cybersecurity test is supposed to measure what an AI model can do with ...

Pierluigi Paganini October 26, 2026
Artificial Intelligence
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 5

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, ...

Pierluigi Paganini October 25, 2026
Security
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 120

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Auditing the auditor: Unmasking Apex Acc ...

Pierluigi Paganini October 25, 2026