LATEST NEWS

VIEW ALL
TrendLabs Q3 Security Roundup on illegal activities
Pierluigi Paganini November 13, 2013

TrendLabs has just published the third quarterly report, titled The Invisible Web Unmasked, on the evolution of cybercrime observed in recent months. TrendLabs have published an interesting report ti ...

GCHQ used fake LinkedIn and Slashdot to hack GRX providers and OPEC
Pierluigi Paganini November 12, 2013

The GCHQ (British Government Communications Headquarters) used fake LinkedIn and Slashdot to hack Belgacom, OPEC & others GRX providers. According to the German weekly news magazine Der Spiegel ...

Brazilian banking threatened by a malware embedded inside RTF file
Pierluigi Paganini November 11, 2013

The clients of the Brazilian financial institutions have been hit by a banking trojan embedded in RTF file and spread through a spam campaign. The banking is one of the most targeted sector by cyberc ...

FireEye has identified a new IE zero-day exploit
Pierluigi Paganini November 11, 2013

FireEye Labs has identified a new IE zero-day exploit used for a watering hole attack in the US. As usual it is crucial to track and mitigate so dangerous threats in time to avoid serious problems. F ...

recent articles

Artificial Intelligence
Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches

Hunt.io traced ARTEX servers and AI-powered hacking tools used in breaches affecting seven South Korean financial institutions. Between late September and early October 2026, seven South Korean fi ...

Pierluigi Paganini November 07, 2026
Artificial Intelligence
One Product Isn't the Problem: Monetizing an AI Portfolio Without Confusing Your Customers

Software vendors can boost revenue by tracking customer usage across products, while AI accelerates pricing and consumption decisions. It is hard to find any software vendor that sells just one pr ...

Pierluigi Paganini November 07, 2026
Security
U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog

U.S. CISA adds SonicWall SonicOS SSLVPN vulnerability CVE-2026-19868 to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Sonic ...

Pierluigi Paganini November 07, 2026
Security
White House Network Appears in Global Residential Proxy Traffic

Layer3 found residential proxy traffic using the White House network, raising concerns about potential exposure of internal systems. Layer3 Intel says it found residential proxy traffic leaving th ...

Pierluigi Paganini November 06, 2026
Artificial Intelligence
OpenAI Rates GPT-6 Cyber Critical After Major Vulnerability Discoveries

OpenAI GPT-6 Cyber found 81 high-severity Firefox flaws and hundreds of Linux bugs, raising new questions about AI-powered cyber risks. OpenAI has introduced GPT-6 Cyber, a model built for securit ...

Pierluigi Paganini November 06, 2026
Security
ENISA Warns of Cyberattacks Targeting Refrigeration Systems Across Europe

ENISA warns of cyberattacks on European refrigeration systems, exposing risks to supermarkets, food supplies and industrial controls. The European Union has issued a coordinated cybersecurity warn ...

Pierluigi Paganini November 06, 2026
Artificial Intelligence
OpenAI Reports Covert Underperformance in GPT-6 Astra

OpenAI says GPT-6 Astra sometimes secretly underperformed on safety research, raising concerns about AI reliability and alignment. OpenAI has disclosed that its GPT-6 Astra model sometimes quietly ...

Pierluigi Paganini November 06, 2026
Security
UNM Health Shuts Clinics and Diverts Patients During Security Incident

A cybersecurity incident forced UNM Health to divert ambulances, cancel appointments, and pause care while it contained the threat. On Monday, October 26, the University of New Mexico Health Syste ...

Pierluigi Paganini November 05, 2026
APT
Russian APT29 Targets Mobile Users with Watering Hole Attacks

Russia-linked group APT29 targeted iOS and Android users through hijacked websites and a compromised analytics service. Sekoia says a large-scale watering hole campaign is going after iOS and Andr ...

Pierluigi Paganini November 05, 2026
Hacking
U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adde ...

Pierluigi Paganini November 05, 2026
Cyber Crime
U.S. Charges Canadian Man in Alleged Hack of University Supercomputers

A Canadian man was extradited to the U.S. to face charges over hacking universities and hijacking their computers to mine cryptocurrency. A Canadian man, Ryan James Roach (35), has been extradicte ...

Pierluigi Paganini November 05, 2026
Security
Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

Barracuda patched two flaws that can be chained to give attackers root access to Email Security Gateway appliances. Barracuda has patched two vulnerabilities that can be chained to gain root acces ...

Pierluigi Paganini November 04, 2026
Hacking
Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe

Cyberattacks disrupted refrigeration monitoring systems at three French blood banks, amid similar attacks targeting European supermarkets. A cyberattack has hit three regional blood banks in Franc ...

Pierluigi Paganini November 04, 2026
Mobile
CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code

Critical Android flaw CVE-2026-58868 could allow remote code execution without user interaction on devices running Android 14 through 17. Google has fixed CVE-2026-58868, a critical Android vulner ...

Pierluigi Paganini November 04, 2026
Security
U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds WordPress flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)  ...

Pierluigi Paganini November 04, 2026
Cyber Crime
Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack

Binance reveals how fake job interviews, malware and internal AI abuse enabled attackers to steal $6.34 billion. The Binance security incident on October 29 shows how a fake recruitment process ca ...

Pierluigi Paganini November 03, 2026
Security
Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions

Synology warns of ransomware attacks exploiting a 2024 flaw in outdated NAS devices, urging users to update DSM immediately. A security fix released in 2024 is now at the centre of ransomware atta ...

Pierluigi Paganini November 03, 2026
Malware
Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers

Google dismantled a 1.3 million-device botnet allegedly built by Android TV box maker Videostrong to enable ad fraud and proxy abuse. Google and its partners dismantled a backdoor called XCPE that ...

Pierluigi Paganini November 03, 2026
Laws and regulations
NIS2 Makes Board Members Personally Liable for Access Control Decisions

NIS2 Article 20 makes management bodies answerable for the access controls they approve, and boards are starting to ask for proof that those controls work. NIS2 board accountability gives director ...

Pierluigi Paganini November 03, 2026
Intelligence
Apple’s spyware notifications reach the Bundestag: what the BSI says to do now

Apple warns German Bundestag lawmakers of mercenary spyware attacks; BSI urges victims to assume compromise. The German government is warning politicians and public figures that they were targeted ...

Pierluigi Paganini November 03, 2026