LATEST NEWS

VIEW ALL
New TrickBot banking Trojan variant borrows spreading capabilities from Wannacry
Pierluigi Paganini August 03, 2017

A cyber gang is improving its version of the TrickBot banking Trojan by implementing the self-spreading worm-like capabilities used by WannaCry and NotPetya Cybercriminals most of all are capital ...

Former Bupa employee offered 1 million customer records for sale on dark web
Pierluigi Paganini August 03, 2017

Former Employee of the Healthcare giant Bupa offered for sale records of 1 Million clients on Dark Web. A former employee of healthcare giant Bupa was selling between 500,000 and 1 million records on ...

The bateleur backdoor is the new weapon in the Carbank gang's arsenal
Pierluigi Paganini August 03, 2017

Experts at Proofpoint noticed the infamous cyber crime gang Carbanak has added a new JScript backdoor dubbed Bateleur Backdoor to its arsenal. According to researchers at security firm Proofpoint, t ...

The Svpeng Trojan continues to evolve, the last variant includes keylogger capabilities
Pierluigi Paganini August 02, 2017

Security experts at Kaspersky discovered the dreaded Svpeng Trojan has been recently modified to implement keylogger features. Cyber criminals are becoming even more aggressive and are using new st ...

recent articles

Security
CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers

CVE-2026-97631: A 16-year-old UEFI flaw (CVSS score of 9.5/10) enables pre-OS code execution. Exposed servers need firmware patches and checks. A critical flaw, tracked as CVE-2026-97631 (CVSS sco ...

Pierluigi Paganini October 28, 2026
Security
U.S. CISA adds Google Brotli and Adobe Commerce and Magento flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Brotli and Adobe Commerce and Magento flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and ...

Pierluigi Paganini October 28, 2026
Artificial Intelligence
Three Japan-Focused Cyberattacks Show How Hackers Use AI

Three Japan-focused cyberattacks show how AI helps hackers scale operations, while exploiting old systems and weak security remains key. In autumn 2026, Japanese companies and other organizations ...

Pierluigi Paganini October 28, 2026
Hacking
Italy ’s Parliament Under Cyber Pressure: Why the Attack on the Chamber Matters

Italy ’s Parliament cyberattack highlights hybrid warfare risks and the need for transparency, stronger defenses and accountability. The cyberattack targeting email accounts at Italy’s Chamber ...

Pierluigi Paganini October 27, 2026
Artificial Intelligence
Australia's Cyber Spy Chief: Expect More Disruption as AI Accelerates Hacking

Australia’s cyber agency warns AI will drive more disruptive attacks, helping hackers find vulnerabilities faster and exploit them at greater scale. Australia's top cyber spy has a blunt message ...

Pierluigi Paganini October 27, 2026
Security
U.S. CISA adds PHP flaws PHP2Shell to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds PHP flaws PHP2Shell to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CIS ...

Pierluigi Paganini October 27, 2026
Hacking
Attackers Take Control of Dahua Cameras and Video Recorders Via Easy4IP

Ukraine warns that attackers can remotely access Dahua cameras and recorders via Easy4IP, viewing video and changing settings. Ukraine's cyber incident response team CERT-UA has warned about attac ...

Pierluigi Paganini October 27, 2026
Artificial Intelligence
Cohere Finds Qwen AI Model Contacting a Server in China

Cohere found an Alibaba AI model attempting to contact a server in China, raising security concerns about unexpected network activity in self-hosted AI systems. A report from Cohere says an Alibab ...

Pierluigi Paganini October 27, 2026
Malware
Magento Campaign Infects 953 Online Stores Across Five Domains

Sansec tracks a Magento skimmer campaign that infected 953 stores, using five domains, bot filtering and malicious code hidden in CMS blocks. A criminal group has infected 953 online stores since ...

Pierluigi Paganini October 26, 2026
Cyber Crime
AI-Generated Fake Bank Calls and NFC App Enabled €380,000 Fraud, Dutch Police Say

Dutch police arrest two men over AI-voiced bank fraud that allegedly used a fake app to steal card data from 170 victims, causing €380,000 in losses. Rotterdam police have arrested two men over ...

Pierluigi Paganini October 26, 2026
Malware
Researchers Uncover Rentable Android Spyware uCreater Targeting WeChat and Telegram

uCreater is Android spyware disguised as trusted apps, stealing credentials, messages and wallet data through a rentable platform. uCreater is a rentable Android spyware platform that hides inside ...

Pierluigi Paganini October 26, 2026
Hacking
PHP2Shell: Suspected North Korean campaign targets 216 vulnerable PHP hosts

Cyfirma links PHP2Shell scans of 216 vulnerable hosts to a suspected North Korean campaign using AI to rank public exploits. On October 21, PHP released emergency patches for two critical vulnera ...

Pierluigi Paganini October 26, 2026
Artificial Intelligence
Anthropic reveals how Claude Mythos 5 crossed security testing boundaries

Anthropic says Claude Mythos 5 targeted real developers with fake identities to push malicious code during a security test. A cybersecurity test is supposed to measure what an AI model can do with ...

Pierluigi Paganini October 26, 2026
Artificial Intelligence
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 5

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, ...

Pierluigi Paganini October 25, 2026
Security
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 120

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Auditing the auditor: Unmasking Apex Acc ...

Pierluigi Paganini October 25, 2026
Breaking News
Security Affairs newsletter Round 601 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini October 25, 2026
Artificial Intelligence
OpenAI Paused Frontier AI Training After a Security Incident

OpenAI paused frontier model training for 11 days after AI agents exposed security weaknesses, VM escapes and covert communication channels. OpenAI published a detailed report this week explaining ...

Pierluigi Paganini October 25, 2026
Hacking
Pierluigi Paganini answers questions about the PHP2Shell flaws

Pierluigi Paganini answers questions about the PHP2Shell vulnerability, early exploitation, AI-assisted attacks, and the risks to businesses, servers, and personal data. 1. Your latest report reve ...

Pierluigi Paganini October 24, 2026
Security
U.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (C ...

Pierluigi Paganini October 24, 2026
Artificial Intelligence
Usage Intelligence: The Monetization Signal Most AI Companies Are Ignoring

AI companies need usage data to align pricing with costs, improve products, identify churn risks, and grow revenue through informed decisions. The AI Paradox There is a paradox: AI companies ex ...

Pierluigi Paganini October 24, 2026