LATEST NEWS

VIEW ALL
OpenSSL announced fix for mystery high critical vulnerability
Pierluigi Paganini March 17, 2015

New versions of OpenSSL will be released on Thursday to patch critical security vulnerabilities, one of which is considered very dangerous. The OpenSSL Project Team announced in an advisory publish ...

Yahoo launches its on-demand password feature
Pierluigi Paganini March 17, 2015

Yahoo announced its new on-demand password feature that lets users into login in their account with a code sent to their mobile phone. Yahoo has announced a new Password-Free login feature to let u ...

IoT security is still a pipe dream
Pierluigi Paganini March 17, 2015

A research conducted by experts at Symantec highlights disturbing security failures in the IoT devices present in today connected home. The purpose of IoT is connect all type of devices that we have ...

Cardless ATMs will improve security of cash withdrawal
Pierluigi Paganini March 17, 2015

A unit of Canada’s Bank of Montreal will launch on Monday its network of cardless ATMs, a technological innovation to improve users' security. Recently we have discussed different kinds of attacks ...

recent articles

Artificial Intelligence
Meta wants to scrape your website to train its AI, and you can't say no

Meta wants the right to scrape your website for AI training. If you have a business account, that includes you. At the end of the month, Meta plans to change its commercial terms in a way that mat ...

Pierluigi Paganini October 19, 2026
Uncategorized
Deepfakes and Election Manipulation: UK Watchdog Seeks Faster Detection

The UK Electoral Commission is building an AI system to alert candidates to damaging deepfakes within three hours. The UK's Electoral Commission is building an AI-powered system to tell candidate ...

Pierluigi Paganini October 19, 2026
Hacking
Big Fish: OpenBSD Root Exploit Chains a 37-Year-Old BSD Bug With a Kernel Flaw

OpenBSD flaws, including a 37-year-old BSD bug, enable local attackers to bypass security protections and gain root access. Patches are available. Cybersecurity firm Calif published a full exploit ...

Pierluigi Paganini October 19, 2026
Hacking
Attackers Abuse Stolen ConnectWise Application Credentials to Target Microsoft 365

Attackers stole ConnectWise application credentials to access Microsoft 365 tenants, prompting the company to suspend cloud services. ConnectWise suspended its Cloud Backup service and took both S ...

Pierluigi Paganini October 19, 2026
Security
Japan's SiteGuard WAF flaw CVE-2026-106931 is already being exploited

Attackers are exploiting vulnerability CVE-2026-106931 in SiteGuard Server Edition to run commands as root or SYSTEM. EG Secure Solutions published an urgent alert warning of CVE-2026-106931, an O ...

Pierluigi Paganini October 19, 2026
Internet of Things
16-Year-Old Broadcom Wi-Fi Bug Lets Attackers Take Over Routers Without a Password

A Broadcom Wi-Fi flaw dating back to 2010 allows attackers within Wi-Fi range to execute code on vulnerable routers without authentication. Researcher Quentin Kaiser presented a talk at Hexacon in ...

Pierluigi Paganini October 19, 2026
Artificial Intelligence
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 4

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, ...

Pierluigi Paganini October 18, 2026
Security
Rust-Based CikaBika Bot Turns Discord into a Command Center

CikaBika Bot uses fake documents to infect Windows systems, then abuses Discord and Ngrok to execute commands, spy on victims, and steal files. Darktrace researchers have documented a new campaign ...

Pierluigi Paganini October 18, 2026
Malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 119

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter IronChain Ransomware Threatens Businesse ...

Pierluigi Paganini October 18, 2026
Breaking News
Security Affairs newsletter Round 600 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini October 18, 2026
Intelligence
North Korean IT Workers Used Stolen US Identities to Earn $3 Million

The FBI raided 40 Texas homes over a North Korean scheme that used fake IT workers to target 70 US companies and generate $3 million. The Justice Department (DoJ) announced coordinated enforcement ...

Pierluigi Paganini October 17, 2026
Security
U.S. CISA adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecu ...

Pierluigi Paganini October 17, 2026
Security
BAE Systems Cyber Incident Takes US Bankruptcy Noticing Center Offline for a Week

A cyber incident at a BAE Systems subsidiary just stopped every bankruptcy court in the US from sending notices, and the problem started a week ago. A security incident at BAE Systems Inc., the US ...

Pierluigi Paganini October 17, 2026
Artificial Intelligence
AI Agents Accessed Indian Organizations Without Authorization, CERT-In Warns

India's CERT-In warns AI agents accessed confidential data undetected, while attackers used offensive AI frameworks to accelerate cyberattacks. CERT-In, India's national cyber response team, publi ...

Pierluigi Paganini October 17, 2026
Security
Burger King Japan Data Breach Impacted 11 Million Customers

Burger King Japan disclosed a breach exposing 11.18 million app users' personal data after attackers accessed its membership system in early October. Burger King Japan has disclosed a data breach ...

Pierluigi Paganini October 16, 2026
Security
F5 addressed critical RCE flaws in NGINX

F5 addressed multiple vulnerabilities, including critical RCE flaws in NGINX that attackers could exploit without authentication. Security and application delivery firm F5 announced fixes for elev ...

Pierluigi Paganini October 16, 2026
Hacking
U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Atlassian flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) a ...

Pierluigi Paganini October 16, 2026
Malware
PEERSTITCH malware: How Attackers Compromised 500 Firewalls Through FortiManager

PEERSTITCH malware exploited FortiManager to expose 500+ firewalls, evade detection inside FortiOS memory, and maintain stealthy access. PEERSTITCH, a stealthy implant deployed during a prolonged ...

Pierluigi Paganini October 16, 2026
Cyber Crime
CenterPoint Energy Data Breach: More Than 1 Million Texans Affected

The regulated utility company CenterPoint Energy says a data breach exposed the personal information of more than 1 million people in Texas. CenterPoint Energy is a regulated utility company used ...

Pierluigi Paganini October 16, 2026
Security
U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email Gateway flaws to its Known Exploited Vulnerabilities catalog. Th ...

Pierluigi Paganini October 15, 2026