LATEST NEWS

VIEW ALL
Apple warned hundreds of users of mercenary spyware attacks
Pierluigi Paganini August 14, 2026

Apple warns users of credible, targeted attacks and urges immediate verification, stronger protections, and expert assistance. Apple has sent a new round of threat notifications to users it believ ...

AmnesiaStealer Gives Attackers Live Control of Victims’ macOS Browsers
Pierluigi Paganini August 14, 2026

AmnesiaStealer targets macOS users through fake GitHub pages, stealing passwords, cookies and data while giving attackers live control of the browser. Jamf Threat Labs researchers disclosed Amnesi ...

Chess.com Leak Exposes 7.3 Million Users - Evidence Points to Scraping
Pierluigi Paganini August 14, 2026

7.3 million Chess.com profiles leaked online: the data is genuine, but evidence points to large-scale scraping, not a server breach. Free is a strange price for stolen data, and that's exactly wha ...

US Authorizes Private Cyber Firms to Hack Transnational Criminal Networks
Pierluigi Paganini August 14, 2026

Trump authorizes vetted US cybersecurity firms to conduct government-approved cyber operations against transnational criminal networks. President Trump signed a national security memorandum on Aug ...

recent articles

Hacking
Pierluigi Paganini answers questions about the PHP2Shell flaws

Pierluigi Paganini answers questions about the PHP2Shell vulnerability, early exploitation, AI-assisted attacks, and the risks to businesses, servers, and personal data. 1. Your latest report reve ...

Pierluigi Paganini October 24, 2026
Security
U.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (C ...

Pierluigi Paganini October 24, 2026
Artificial Intelligence
Usage Intelligence: The Monetization Signal Most AI Companies Are Ignoring

AI companies need usage data to align pricing with costs, improve products, identify churn risks, and grow revenue through informed decisions. The AI Paradox There is a paradox: AI companies ex ...

Pierluigi Paganini October 24, 2026
Data Breach
Capcom Data Breach Exposes 11.7 Million Email Addresses

Capcom disclosed a data breach exposing 11.7 million email addresses and account details after hackers accessed its CAPCOM ID service. Japanese gaming company Capcom has disclosed a data breach di ...

Pierluigi Paganini October 24, 2026
Hacking
U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Secur ...

Pierluigi Paganini October 24, 2026
Security
PHP Warns of New Code Execution Flaw Days After PHP2Shell Patches

PHP warns of a new, unlikely code execution flaw, CVE-2026-115560, and advises disabling session upload progress until a fix is released. PHP has warned of a new code execution vulnerability, trac ...

Pierluigi Paganini October 23, 2026
Laws and regulations
Meta Faces $25 Billion Penalty Linked to Cambridge Analytica Scandal

A New Mexico judge ordered Meta to pay $25 billion for misleading users about privacy, setting a record penalty. Meta plans to appeal. This week a New Mexico judge ordered Meta to pay the state $2 ...

Pierluigi Paganini October 23, 2026
Hacking
PHP2Shell: Millions of Attacks, No Confirmed Successful Exploits Yet

PHP2Shell attacks have surged into the millions, but no successful exploitation is confirmed. Patch it immediately. On October 21, PHP released emergency patches for two critical vulnerabilities t ...

Pierluigi Paganini October 23, 2026
Cyber Crime
INTERPOL Operation Serengeti III Nets 1,462 Arrests and Recovers $105 Million in Cybercrime Crackdown

INTERPOL's Operation Serengeti III led to 1,462 arrests, disrupted 10,909 malicious networks and recovered $105 million across 21 countries. INTERPOL announced the results of Operation Serengeti I ...

Pierluigi Paganini October 23, 2026
APT
Microsoft Links ConnectWise Breach to China-Linked Group Using AI Pentesting Tool ARTEX

China-linked Storm-0940 used AI tool ARTEX to target 2,250 Microsoft 365 tenants, exploiting stolen ConnectWise credentials at machine speed. Microsoft published a detailed technical report naming ...

Pierluigi Paganini October 22, 2026
Security
Signal Vulnerability Could Keep Calls Alive After Users Hang Up

A critical Signal flaw could keep calls active after hang-up, exposing microphone or camera. Update to a fixed version immediately. A critical vulnerability, tracked as CVE-2026-113380 (CVSS score ...

Pierluigi Paganini October 22, 2026
Hacking
PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports

AWS detected PHP2Shell exploit attempts four days before disclosure, highlighting the risk of attackers exploiting critical flaws before patches arrive. Attackers attempted to exploit two critical ...

Pierluigi Paganini October 22, 2026
Cyber Crime
FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations

SafePay ransomware has hit 600+ organizations since 2024, using stolen credentials, VPN access and double extortion to pressure victims into paying. CISA, the FBI, the US Secret Service, Germany's ...

Pierluigi Paganini October 22, 2026
Breaking News
Russian Satellite Makes a Close Approach To A Commercial Radar Satellite Used by Ukraine

A Russian satellite made a close approach to a commercial radar satellite linked to Ukraine, raising concerns about surveillance and security in space. A Russian-made satellite called Kosmos 2612 ...

Pierluigi Paganini October 21, 2026
Artificial Intelligence
OpenAI Reports Two Incidents of AI Agents Disabling Their Own Oversight

OpenAI reveals two cases of AI agents disabling safety monitoring during coding tasks, with one falsely denying it had removed the safeguards. OpenAI published an internal incident report this wee ...

Pierluigi Paganini October 21, 2026
Artificial Intelligence
US Government Orders DeepSeek Out of Federal Civilian Systems

PHP prepares emergency patches for two critical RCE flaws, while older, unsupported versions could remain exposed without vendor fixes. The U.S. government ordered federal civilian agencies to rem ...

Pierluigi Paganini October 21, 2026
Security
PHP Prepares Emergency Fixes for Two Critical Remote Code Execution Flaws

PHP will release emergency fixes for two critical RCE flaws rated 9.2, as researchers warn of potential risks to exposed and unsupported systems. PHP is preparing an emergency security release for ...

Pierluigi Paganini October 21, 2026
Intelligence
NSO Spyware Pegasus Hit a Serbian University Rector Six Days Before Snap Elections

Citizen Lab confirmed Pegasus on a Serbian rector’s iPhone 6 days before elections, raising the known civil society spyware target count to 16. The Citizen Lab published a research note confirmi ...

Pierluigi Paganini October 21, 2026
Data Breach
Nikkei data breach affected over 1.8 million records

Nikkei disclosed a data breach affecting over 1.8 million records after hackers used stolen credentials to access a cloud service for system development. Japanese media company Nikkei has disclose ...

Pierluigi Paganini October 20, 2026
Breaking News
Google Cloud Outage in London Disrupts Revolut Banking Services

Google Cloud's London outage disrupted Revolut payments and ATM withdrawals, while ING Germany reported online banking issues. Multiple Google Cloud services went offline in the London region this ...

Pierluigi Paganini October 20, 2026