LATEST NEWS

VIEW ALL
AVG, McAfee, and Kaspersky antivirus were vulnerable to critical flaw
Pierluigi Paganini December 10, 2015

Experts at enSilo have found a critical security vulnerability in various antivirus (AV) software that could be exploited by attackers to turn the AntiVirus to an attack-enabler tool. Some of the mos ...

NCA launched #CyberChoice campaign, to prevent youngsters become cyber criminals
Pierluigi Paganini December 10, 2015

The Britain's National Crime Agency (NCA) has launched this week #CyberChoices campaign that targets parents of youngsters aged 12-15 to explain them how it is easy to be involved in cyber criminal ac ...

Internet root servers flooded with 5 million queries a second
Pierluigi Paganini December 10, 2015

Two anomalous DDoS attacks have flooded the Internet root servers that received more than 5 million queries a second. Early last week, anomalous DDoS attacks have threatened the Internet root server ...

xboxlive digital certificate exposed opens users to MITM attacks
Pierluigi Paganini December 09, 2015

Microsoft has issued an advisory to notify customers that the private keys for an SSL/TLS digital certificate for *xboxlive.com have been disclosed. According to a security advisory published by Mic ...

recent articles

APT
Contagious Interview campaign expands with 197 npm Ppackages spreading new OtterCookie malware

North Korea-linked actors behind Contagious Interview uploaded 197 new malicious npm packages to distribute a new OtterCookie malware version. North Korea-linked threat actors added 197 new malici ...

Pierluigi Paganini November 30, 2025
Data Breach
Attackers stole member data from French Soccer Federation

The French Soccer Federation (FFF) disclosed a data breach after hackers used a compromised account to steal member data. A compromised account allowed attackers to breach the French Soccer Federa ...

Pierluigi Paganini November 28, 2025
Security
Thousands of sensitive secrets published on JSONFormatter and CodeBeautify

Users of JSONFormatter and CodeBeautify leaked thousands of sensitive secrets, including credentials and private keys, WatchTowr warns. WatchTowr’s latest research reveals massive leaks of passw ...

Pierluigi Paganini November 28, 2025
Malware
New Mirai variant ShadowV2 tests IoT exploits amid AWS disruption

ShadowV2, a new Mirai-based botnet, briefly targeted vulnerable IoT devices during October’s AWS outage, likely as a test run. During the late-October AWS disruption, FortiGuard Labs researchers ...

Pierluigi Paganini November 28, 2025
Data Breach
Asahi says crooks stole data of approximately 2M customers and employees

Asahi says hackers stole data of approximately 2M customers and employees before a ransomware attack crippled its Japan operations. Threat actors hit Asahi with a ransomware attack in September, s ...

Pierluigi Paganini November 27, 2025
Data Breach
OpenAI data may have been exposed after a cyberattack on analytics firm Mixpanel

OpenAI warns some users that a cyberattack on analytics firm Mixpanel may have exposed their data. Mixpanel is a product analytics platform that companies use to understand how people interact wi ...

Pierluigi Paganini November 27, 2025
Internet of Things
New ASUS firmware patches critical AiCloud vulnerability

ASUS released new firmware to address multiple vulnerabilities, including a critical authentication bypass flaw in routers with AiCloud enabled. ASUS has issued new firmware addressing nine securi ...

Pierluigi Paganini November 27, 2025
Security
For the first time, a RomCom payload has been observed being distributed via SocGholish

RomCom malware used the SocGholish fake update loader to deliver Mythic Agent to a U.S. civil engineering firm. In September 2025, Arctic Wolf Labs observed RomCom threat actors delivering the Myt ...

Pierluigi Paganini November 26, 2025
Security
Multiple London councils faced a cyberattack

Multiple London councils, including Chelsea and Westminster, faced a cyberattack that may have exposed resident data. Authorities are actively investigating the incident. A cyberattack struck mult ...

Pierluigi Paganini November 26, 2025
Cyber Crime
Emergency alerts go dark after cyberattack on OnSolve CodeRED

Cyberattack on OnSolve CodeRED disrupted emergency alert services for U.S. state, local, police, and fire agencies. A cyberattack on the OnSolve CodeRED alert platform disrupted emergency notifica ...

Pierluigi Paganini November 26, 2025
Cyber Crime
Dissecting a new malspam chain delivering Purelogs infostealer

The AISI Research Center's Cybersecurity Observatory publishes the report "Dissecting a new malspam chain delivering Purelogs infostealer" - November 25, 2025. Organizational and personal security ...

Pierluigi Paganini November 26, 2025
Cyber Crime
FBI: bank impersonators fuel $262M surge in account takeover fraud

Cybercriminals posing as banks drove a major spike in account takeover fraud this year, stealing over $262 million, the FBI warned. The FBI warns of a surge in account takeover fraud, with crimina ...

Pierluigi Paganini November 25, 2025
Cyber Crime
Morphisec warns StealC V2 malware spread through weaponized blender files

StealC V2 spread via malicious Blender files on 3D model sites like CGTrader, abusing Blender’s ability to run hidden Python scripts. Cybersecurity firm Morphisec reported that Russian threat a ...

Pierluigi Paganini November 25, 2025
Malware
CISA: Spyware and RATs used to target WhatsApp and Signal Users

CISA warns that threat actors are actively using commercial spyware and RATs to target users of mobile messaging apps WhatsApp and Signal. The U.S. Cybersecurity and Infrastructure Security Agency ...

Pierluigi Paganini November 25, 2025
Security
Harvard reports vishing breach exposing alumni and donor contact data

Harvard revealed its Alumni Affairs systems suffered a vishing breach, exposing emails, phone numbers, addresses, donation data and biographical info. Harvard revealed that threat actors breached ...

Pierluigi Paganini November 24, 2025
Data Breach
Delta Dental of Virginia data breach impacts 145,918 customers

Delta Dental of Virginia suffered a data breach that exposed personal and health data of about 146,000 customers after the hack of an email account. A security breach at the dental care provider D ...

Pierluigi Paganini November 24, 2025
Malware
Attackers deliver ShadowPad via newly patched WSUS RCE bug

Attackers exploited a patched WSUS flaw (CVE-2025-59287) to gain access, use PowerCat for a shell, and deploy the ShadowPad malware. AhnLab SEcurity intelligence Center (ASEC) researchers reporte ...

Pierluigi Paganini November 24, 2025
Security
AI attack agents are accelerators, not autonomous weapons: the Anthropic attack

Why today’s AI attack agents boost human attackers but still fall far from becoming real autonomous weapons. Anthropic recently published a report that sparked a lively debate about what AI agen ...

Pierluigi Paganini November 24, 2025
Hacking
Scattered Spider alleged members deny TfL charges

Two UK teens linked to Scattered Spider pleaded not guilty to charges over last year’s TfL cyberattack at a Southwark Crown Court hearing. Two British teens accused of Computer Misuse Act offens ...

Pierluigi Paganini November 24, 2025
Data Breach
Iberia discloses security incident tied to supplier breach

Iberia warns customers of a supplier-related data breach as a threat actor claims to hold 77GB of stolen airline data. Iberia is warning customers about a data breach after a third-party supplier ...

Pierluigi Paganini November 23, 2025