LATEST NEWS

VIEW ALL
Dell puts users at risk with dangerous eDellRoot root certificate
Pierluigi Paganini November 24, 2015

Dell is in the headlines for shipping PCs with a pre-installed trusted root certificate dubbed eDellRoot that opens users to a number of cyber attacks. Dell is in the headlines for shipping PCs with ...

Documents demonstrate NSA continued mass surveillance
Pierluigi Paganini November 24, 2015

Newly disclosed documents show that the NSA had found a way to continue spying on American citizens' email traffic from overseas. The NSA continued to spy on the email messages of Americans, once ag ...

TrueCrypt is safer than previous examinations suggest
Pierluigi Paganini November 23, 2015

A new security audit the TrueCrypt software confirmed that even if it is plagued by some vulnerabilities, the application is effective when it comes to protecting data. TrueCrypt, secure or insecure ...

Damballa revealed the secrets behind the Destover malware that infected the Sony Pictures
Pierluigi Paganini November 23, 2015

Security researchers at Damballa Willis McDonald and Loucif Kharouni have conducted a deep analysis of the Destover malware used in the Sony Pictures attack. Security researchers at Damballa Willis ...

recent articles

Cyber Crime
FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations

SafePay ransomware has hit 600+ organizations since 2024, using stolen credentials, VPN access and double extortion to pressure victims into paying. CISA, the FBI, the US Secret Service, Germany's ...

Pierluigi Paganini October 22, 2026
Breaking News
Russian Satellite Makes a Close Approach To A Commercial Radar Satellite Used by Ukraine

A Russian satellite made a close approach to a commercial radar satellite linked to Ukraine, raising concerns about surveillance and security in space. A Russian-made satellite called Kosmos 2612 ...

Pierluigi Paganini October 21, 2026
Artificial Intelligence
OpenAI Reports Two Incidents of AI Agents Disabling Their Own Oversight

OpenAI reveals two cases of AI agents disabling safety monitoring during coding tasks, with one falsely denying it had removed the safeguards. OpenAI published an internal incident report this wee ...

Pierluigi Paganini October 21, 2026
Artificial Intelligence
US Government Orders DeepSeek Out of Federal Civilian Systems

PHP prepares emergency patches for two critical RCE flaws, while older, unsupported versions could remain exposed without vendor fixes. The U.S. government ordered federal civilian agencies to rem ...

Pierluigi Paganini October 21, 2026
Security
PHP Prepares Emergency Fixes for Two Critical Remote Code Execution Flaws

PHP will release emergency fixes for two critical RCE flaws rated 9.2, as researchers warn of potential risks to exposed and unsupported systems. PHP is preparing an emergency security release for ...

Pierluigi Paganini October 21, 2026
Intelligence
NSO Spyware Pegasus Hit a Serbian University Rector Six Days Before Snap Elections

Citizen Lab confirmed Pegasus on a Serbian rector’s iPhone 6 days before elections, raising the known civil society spyware target count to 16. The Citizen Lab published a research note confirmi ...

Pierluigi Paganini October 21, 2026
Data Breach
Nikkei data breach affected over 1.8 million records

Nikkei disclosed a data breach affecting over 1.8 million records after hackers used stolen credentials to access a cloud service for system development. Japanese media company Nikkei has disclose ...

Pierluigi Paganini October 20, 2026
Breaking News
Google Cloud Outage in London Disrupts Revolut Banking Services

Google Cloud's London outage disrupted Revolut payments and ATM withdrawals, while ING Germany reported online banking issues. Multiple Google Cloud services went offline in the London region this ...

Pierluigi Paganini October 20, 2026
Data Breach
AfD Email Breach Exposes 421,000 Messages in Anonymous Online Archive

A data breach exposed AfD emails, while an anonymous site published AI summaries of 421,000 messages, raising questions about authenticity and privacy. Germany's Alternative für Deutschland (AfD) ...

Pierluigi Paganini October 20, 2026
Artificial Intelligence
Microsoft Treats AI Agents as Insider Threats in New Security Framework

Microsoft urges organizations to secure AI Agents as insider threats, using dynamic permissions, continuous risk monitoring and automated containment. Microsoft published a detailed blog post expl ...

Pierluigi Paganini October 20, 2026
Hacking
Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners

Attackers exploit Plex2Shell flaws to install crypto miners and proxy software. Admins should update their Plex Media Server. Plex Media Server is designed to make movies, music, and other media a ...

Pierluigi Paganini October 19, 2026
Artificial Intelligence
Meta wants to scrape your website to train its AI, and you can't say no

Meta wants the right to scrape your website for AI training. If you have a business account, that includes you. At the end of the month, Meta plans to change its commercial terms in a way that mat ...

Pierluigi Paganini October 19, 2026
Uncategorized
Deepfakes and Election Manipulation: UK Watchdog Seeks Faster Detection

The UK Electoral Commission is building an AI system to alert candidates to damaging deepfakes within three hours. The UK's Electoral Commission is building an AI-powered system to tell candidate ...

Pierluigi Paganini October 19, 2026
Hacking
Big Fish: OpenBSD Root Exploit Chains a 37-Year-Old BSD Bug With a Kernel Flaw

OpenBSD flaws, including a 37-year-old BSD bug, enable local attackers to bypass security protections and gain root access. Patches are available. Cybersecurity firm Calif published a full exploit ...

Pierluigi Paganini October 19, 2026
Hacking
Attackers Abuse Stolen ConnectWise Application Credentials to Target Microsoft 365

Attackers stole ConnectWise application credentials to access Microsoft 365 tenants, prompting the company to suspend cloud services. ConnectWise suspended its Cloud Backup service and took both S ...

Pierluigi Paganini October 19, 2026
Security
Japan's SiteGuard WAF flaw CVE-2026-106931 is already being exploited

Attackers are exploiting vulnerability CVE-2026-106931 in SiteGuard Server Edition to run commands as root or SYSTEM. EG Secure Solutions published an urgent alert warning of CVE-2026-106931, an O ...

Pierluigi Paganini October 19, 2026
Internet of Things
16-Year-Old Broadcom Wi-Fi Bug Lets Attackers Take Over Routers Without a Password

A Broadcom Wi-Fi flaw dating back to 2010 allows attackers within Wi-Fi range to execute code on vulnerable routers without authentication. Researcher Quentin Kaiser presented a talk at Hexacon in ...

Pierluigi Paganini October 19, 2026
Artificial Intelligence
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 4

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, ...

Pierluigi Paganini October 18, 2026
Security
Rust-Based CikaBika Bot Turns Discord into a Command Center

CikaBika Bot uses fake documents to infect Windows systems, then abuses Discord and Ngrok to execute commands, spy on victims, and steal files. Darktrace researchers have documented a new campaign ...

Pierluigi Paganini October 18, 2026
Malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 119

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter IronChain Ransomware Threatens Businesse ...

Pierluigi Paganini October 18, 2026