LATEST NEWS

VIEW ALL
Malvertising campaign delivered Android Svpeng Trojan via a zero-day in Chrome
Pierluigi Paganini November 09, 2016

Kaspersky discovered a new strain of the Svpeng Trojan delivered through popular news websites using Google’s AdSense via a zero-day in Chrome. Crooks exploited a Chrome Zero-Day vulnerability to ...

What does a DDoS with everyday life? DDoS knocks out building control systems in Finland
Pierluigi Paganini November 09, 2016

The residents in two apartment buildings Finland faced more that a week of serious problem due to a DDoS attack that targeted the building control systems. What does a DDoS with everyday life? The re ...

Microsoft patches CVE-2016-7255 Windows zero-day exploited by Fancy Bear
Pierluigi Paganini November 09, 2016

Microsoft has issued a security patch that fixes the zero-day vulnerability tracked as CVE-2016-7255 exploited by Russian hackers. Microsoft has issued security patches that fixed also the zero-day v ...

Adobe issued security patches for 9 Flash Player flaws reported via ZDI
Pierluigi Paganini November 09, 2016

Adobe released security updates that address nine vulnerabilities in Flash Player that could be exploited for remote code execution. Adobe has released security updates to address one vulnerabil ...

recent articles

Data Breach
Nikkei data breach affected over 1.8 million records

Nikkei disclosed a data breach affecting over 1.8 million records after hackers used stolen credentials to access a cloud service for system development. Japanese media company Nikkei has disclose ...

Pierluigi Paganini October 20, 2026
Breaking News
Google Cloud Outage in London Disrupts Revolut Banking Services

Google Cloud's London outage disrupted Revolut payments and ATM withdrawals, while ING Germany reported online banking issues. Multiple Google Cloud services went offline in the London region this ...

Pierluigi Paganini October 20, 2026
Data Breach
AfD Email Breach Exposes 421,000 Messages in Anonymous Online Archive

A data breach exposed AfD emails, while an anonymous site published AI summaries of 421,000 messages, raising questions about authenticity and privacy. Germany's Alternative für Deutschland (AfD) ...

Pierluigi Paganini October 20, 2026
Artificial Intelligence
Microsoft Treats AI Agents as Insider Threats in New Security Framework

Microsoft urges organizations to secure AI Agents as insider threats, using dynamic permissions, continuous risk monitoring and automated containment. Microsoft published a detailed blog post expl ...

Pierluigi Paganini October 20, 2026
Hacking
Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners

Attackers exploit Plex2Shell flaws to install crypto miners and proxy software. Admins should update their Plex Media Server. Plex Media Server is designed to make movies, music, and other media a ...

Pierluigi Paganini October 19, 2026
Artificial Intelligence
Meta wants to scrape your website to train its AI, and you can't say no

Meta wants the right to scrape your website for AI training. If you have a business account, that includes you. At the end of the month, Meta plans to change its commercial terms in a way that mat ...

Pierluigi Paganini October 19, 2026
Uncategorized
Deepfakes and Election Manipulation: UK Watchdog Seeks Faster Detection

The UK Electoral Commission is building an AI system to alert candidates to damaging deepfakes within three hours. The UK's Electoral Commission is building an AI-powered system to tell candidate ...

Pierluigi Paganini October 19, 2026
Hacking
Big Fish: OpenBSD Root Exploit Chains a 37-Year-Old BSD Bug With a Kernel Flaw

OpenBSD flaws, including a 37-year-old BSD bug, enable local attackers to bypass security protections and gain root access. Patches are available. Cybersecurity firm Calif published a full exploit ...

Pierluigi Paganini October 19, 2026
Hacking
Attackers Abuse Stolen ConnectWise Application Credentials to Target Microsoft 365

Attackers stole ConnectWise application credentials to access Microsoft 365 tenants, prompting the company to suspend cloud services. ConnectWise suspended its Cloud Backup service and took both S ...

Pierluigi Paganini October 19, 2026
Security
Japan's SiteGuard WAF flaw CVE-2026-106931 is already being exploited

Attackers are exploiting vulnerability CVE-2026-106931 in SiteGuard Server Edition to run commands as root or SYSTEM. EG Secure Solutions published an urgent alert warning of CVE-2026-106931, an O ...

Pierluigi Paganini October 19, 2026
Internet of Things
16-Year-Old Broadcom Wi-Fi Bug Lets Attackers Take Over Routers Without a Password

A Broadcom Wi-Fi flaw dating back to 2010 allows attackers within Wi-Fi range to execute code on vulnerable routers without authentication. Researcher Quentin Kaiser presented a talk at Hexacon in ...

Pierluigi Paganini October 19, 2026
Artificial Intelligence
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 4

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, ...

Pierluigi Paganini October 18, 2026
Security
Rust-Based CikaBika Bot Turns Discord into a Command Center

CikaBika Bot uses fake documents to infect Windows systems, then abuses Discord and Ngrok to execute commands, spy on victims, and steal files. Darktrace researchers have documented a new campaign ...

Pierluigi Paganini October 18, 2026
Malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 119

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter IronChain Ransomware Threatens Businesse ...

Pierluigi Paganini October 18, 2026
Breaking News
Security Affairs newsletter Round 600 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini October 18, 2026
Intelligence
North Korean IT Workers Used Stolen US Identities to Earn $3 Million

The FBI raided 40 Texas homes over a North Korean scheme that used fake IT workers to target 70 US companies and generate $3 million. The Justice Department (DoJ) announced coordinated enforcement ...

Pierluigi Paganini October 17, 2026
Security
U.S. CISA adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecu ...

Pierluigi Paganini October 17, 2026
Security
BAE Systems Cyber Incident Takes US Bankruptcy Noticing Center Offline for a Week

A cyber incident at a BAE Systems subsidiary just stopped every bankruptcy court in the US from sending notices, and the problem started a week ago. A security incident at BAE Systems Inc., the US ...

Pierluigi Paganini October 17, 2026
Artificial Intelligence
AI Agents Accessed Indian Organizations Without Authorization, CERT-In Warns

India's CERT-In warns AI agents accessed confidential data undetected, while attackers used offensive AI frameworks to accelerate cyberattacks. CERT-In, India's national cyber response team, publi ...

Pierluigi Paganini October 17, 2026
Security
Burger King Japan Data Breach Impacted 11 Million Customers

Burger King Japan disclosed a breach exposing 11.18 million app users' personal data after attackers accessed its membership system in early October. Burger King Japan has disclosed a data breach ...

Pierluigi Paganini October 16, 2026