LATEST NEWS

VIEW ALL
Malware, a cyber threat increasingly difficult to contain
Pierluigi Paganini August 24, 2012

Article published on Hakin9 IT Security Magazine - August 2012 When we speak about malware we introduce one of the worst cyber threat that daily evolve with the capacity to hit every sector wit ...

Crisis malware threatens the virtualized environments
Pierluigi Paganini August 23, 2012

This is an hot summer under the malware perspective, we have spoken of new malware for cyber espionage and of new fraud schemas based on malicious software diffusion. Many experts use to avoid malw ...

New raise of Citadel malware...banking again under attack
Pierluigi Paganini August 22, 2012

The FBI has launched an alert titled "Citadel Malware Continues to Deliver Reveton Ransomware in Attempts to Extort Money " One of the sectors most targeted by cyber attacks and by malware is the ban ...

Saudi Aramco, are we ready for an escalation of cyber attacks?
Pierluigi Paganini August 21, 2012

Last week it has been registered a serious cyber attack against one of the world's largest energy companies, the Saudi Aramco, and a group named the Arab Youth Group has claimed responsibility for the ...

recent articles

Hacking
Brush exploit can cause any Chromium browser to collapse in 15-60 seconds

“Brash” flaw in Chromium’s Blink engine lets attackers crash browsers instantly via a single malicious URL, researcher Jose Pino revealed. Security researcher Jose Pino found a severe vulner ...

Pierluigi Paganini October 30, 2025
Security
Ex-Defense contractor exec pleads guilty to selling cyber exploits to Russia

Former US defense contractor exec Peter Williams pled guilty to stealing trade secrets and selling cyber exploits to a Russian broker, per the US DOJ. Ex-US defense contractor Peter Williams (39) ...

Pierluigi Paganini October 30, 2025
Data Breach
Dentsu’s US subsidiary Merkle hit by cyberattack, staff and client data exposed

Dentsu said its U.S. unit Merkle was hit by a cyberattack exposing staff and client data, forcing some systems offline to mitigate the security breach. Japanese multinational advertising and publi ...

Pierluigi Paganini October 30, 2025
Hacktivism
Hacktivists breach Canada’s critical infrastructure, cyber Agency warns

Canada’s cyber agency warns hacktivists breached critical infrastructure, altering industrial controls and risking public safety. The Canadian Centre for Cyber Security revealed that hacktivists ...

Pierluigi Paganini October 29, 2025
APT
Russian hackers, likely linked to Sandworm, exploit legitimate tools against Ukrainian targets

Russian actors, likely linked to Sandworm, targeted Ukrainian firms using LotL tactics and dual-use tools to steal data and stay hidden, says Symantec and Carbon Black. Russian threat actors, like ...

Pierluigi Paganini October 29, 2025
Security
U.S. CISA adds Dassault Systèmes DELMIA Apriso flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Dassault Systèmes DELMIA Apriso flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure S ...

Pierluigi Paganini October 29, 2025
Malware
Herodotus Android malware mimics human typing to evade detection

Threat Fabric researchers spotted Herodotus Android malware mimicking human typing with random delays to evade detection. Threat Fabric found a new Android malware, named Herodotus, which mimics ...

Pierluigi Paganini October 29, 2025
Malware
Aisuru botnet is behind record 20Tb/sec DDoS attacks

A new Mirai-based IoT botnet, dubbed Aisuru, was used to launch multiple high-impact DDoS attacks exceeding 20Tb/sec and/or 4gpps. In October 2025, the Aisuru Mirai-based IoT botnet launched massi ...

Pierluigi Paganini October 28, 2025
Cyber Crime
Everest group claimed the hack of Sweden’s power grid operator Svenska kraftnät

Hackers hit Sweden’s power grid operator Svenska kraftnät, stealing data via a file transfer tool. The power grid was not affected. Hackers breached Sweden’s state-owned power grid operator S ...

Pierluigi Paganini October 28, 2025
Security
Critical ASP.NET flaw hits QNAP NetBak PC Agent

QNAP warns of critical ASP.NET flaw (CVE-2025-55315) in NetBak PC Agent, letting attackers hijack credentials or bypass security via HTTP smuggling. QNAP urges users to patch a critical ASP.NET Co ...

Pierluigi Paganini October 28, 2025
Cyber Crime
Ransomware payments hit record low: only 23% Pay in Q3 2025

Only 23% of ransomware victims paid in Q3 2025, the lowest ever, continuing a six-year decline in payment rates, Coveware reports. Cybersecurity firm Coveware reports that only 23% of ransomware v ...

Pierluigi Paganini October 28, 2025
Security
X warns users to re-enroll passkeys and YubiKeys for 2FA by Nov 10

X urges users with passkeys or YubiKeys to re-enroll 2FA by Nov 10, 2025, or risk account lockout. Re-enroll, switch 2FA, or disable it. Social media platform X is urging users who use passkeys or ...

Pierluigi Paganini October 28, 2025
APT
Memento Labs, the ghost of Hacking Team, has returned — or maybe it was never gone at all.

Kaspersky links the first Chrome zero-day of 2025 to tools used in attacks attributed to Memento Labs, formerly known as the Hacking Team. The actor behind Operation ForumTroll used the same tools ...

Pierluigi Paganini October 27, 2025
Hacking
Crafted URLs can trick OpenAI Atlas into running dangerous commands

Attackers can trick OpenAI Atlas browser via prompt injection, treating malicious instructions disguised as URLs in the omnibox as trusted commands. Attackers can exploit the OpenAI Atlas browser ...

Pierluigi Paganini October 27, 2025
Malware
Linux variant of Qilin Ransomware targets Windows via remote management tools and BYOVD

Qilin ransomware group used Linux binaries on Windows to evade EDRs, steal backups, and disable defenses via BYOVD attacks. Trend Research found that the Qilin ransomware group (aka Agenda) used a ...

Pierluigi Paganini October 27, 2025
Uncategorized
Wordfence blocks 8.7M attacks exploiting old GutenKit and Hunk Companion flaws

Hackers exploited old RCE flaws in WordPress GutenKit and Hunk Companion plugins. Wordfence firm blocked 8.7M attacks in two days. In September and October 2024, submissions revealed Arbitrary Plu ...

Pierluigi Paganini October 27, 2025
Malware
Safepay ransomware group claims the hack of professional video surveillance provider Xortec

Safepay group claims the hack of professional video surveillance provider Xortec and added the company to its data leak site. The Safepay group claimed responsibility for hacking German video surv ...

Pierluigi Paganini October 26, 2025
Security
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 68

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter TikTok videos continue to push infosteal ...

Pierluigi Paganini October 26, 2025
Breaking News
Security Affairs newsletter Round 547 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini October 26, 2025
Security
Russian Rosselkhoznadzor hit by DDoS attack, food shipments across Russia delayed

A DDoS attack on Russia’s food safety agency Rosselkhoznadzor disrupted food shipments by crippling its VetIS and Saturn tracking systems. A DDoS cyberattack on Russia’s food safety agency, Ro ...

Pierluigi Paganini October 25, 2025