LATEST NEWS

VIEW ALL
MACSPY - Remote Access Trojan as a service on Dark web
Pierluigi Paganini June 14, 2017

Reporters for the online service "Bleeping Computer" have uncovered a new threat to Apple being offered on the dark web, it is the MACSPY RAT. Reporters for the online service "Bleeping Computer" hav ...

Joint Technical Alert published by DHS and FBI warns of North Korea's Hidden Cobra APT
Pierluigi Paganini June 14, 2017

The United States Computer Emergency Readiness Team (US-CERT) issued a technical alert about the activity of the North Korea’s 'Hidden Cobra' APT group. The joint Technical Alert (TA) report is the ...

Microsoft patches two critical remote code execution (RCE) flaws that have been exploited in attacks
Pierluigi Paganini June 14, 2017

Microsoft released the June 2017 Patch Tuesday to address more than 90 security flaws, including two critical RCE that have been exploited in attacks. Microsoft released June Patch Tuesday updates th ...

Adobe patches tens of vulnerabilities in Flash Player, Shockwave Player, Captivate and Digital Editions
Pierluigi Paganini June 14, 2017

On Tuesday, Adobe released updates for Flash Player, Shockwave Player, Captivate and Digital Editions addressing a total of 20 vulnerabilities. Some vulnerabilities fixed by Adobe are critical remote ...

recent articles

Security
Signal Vulnerability Could Keep Calls Alive After Users Hang Up

A critical Signal flaw could keep calls active after hang-up, exposing microphone or camera. Update to a fixed version immediately. A critical vulnerability, tracked as CVE-2026-113380 (CVSS score ...

Pierluigi Paganini October 22, 2026
Hacking
PHP2Shell Attacks Started Four Days Before Public Disclosure, AWS Reports

AWS detected PHP2Shell exploit attempts four days before disclosure, highlighting the risk of attackers exploiting critical flaws before patches arrive. Attackers attempted to exploit two critical ...

Pierluigi Paganini October 22, 2026
Cyber Crime
FBI and CISA Warn of SafePay Ransomware Attacks on 600 Organizations

SafePay ransomware has hit 600+ organizations since 2024, using stolen credentials, VPN access and double extortion to pressure victims into paying. CISA, the FBI, the US Secret Service, Germany's ...

Pierluigi Paganini October 22, 2026
Breaking News
Russian Satellite Makes a Close Approach To A Commercial Radar Satellite Used by Ukraine

A Russian satellite made a close approach to a commercial radar satellite linked to Ukraine, raising concerns about surveillance and security in space. A Russian-made satellite called Kosmos 2612 ...

Pierluigi Paganini October 21, 2026
Artificial Intelligence
OpenAI Reports Two Incidents of AI Agents Disabling Their Own Oversight

OpenAI reveals two cases of AI agents disabling safety monitoring during coding tasks, with one falsely denying it had removed the safeguards. OpenAI published an internal incident report this wee ...

Pierluigi Paganini October 21, 2026
Artificial Intelligence
US Government Orders DeepSeek Out of Federal Civilian Systems

PHP prepares emergency patches for two critical RCE flaws, while older, unsupported versions could remain exposed without vendor fixes. The U.S. government ordered federal civilian agencies to rem ...

Pierluigi Paganini October 21, 2026
Security
PHP Prepares Emergency Fixes for Two Critical Remote Code Execution Flaws

PHP will release emergency fixes for two critical RCE flaws rated 9.2, as researchers warn of potential risks to exposed and unsupported systems. PHP is preparing an emergency security release for ...

Pierluigi Paganini October 21, 2026
Intelligence
NSO Spyware Pegasus Hit a Serbian University Rector Six Days Before Snap Elections

Citizen Lab confirmed Pegasus on a Serbian rector’s iPhone 6 days before elections, raising the known civil society spyware target count to 16. The Citizen Lab published a research note confirmi ...

Pierluigi Paganini October 21, 2026
Data Breach
Nikkei data breach affected over 1.8 million records

Nikkei disclosed a data breach affecting over 1.8 million records after hackers used stolen credentials to access a cloud service for system development. Japanese media company Nikkei has disclose ...

Pierluigi Paganini October 20, 2026
Breaking News
Google Cloud Outage in London Disrupts Revolut Banking Services

Google Cloud's London outage disrupted Revolut payments and ATM withdrawals, while ING Germany reported online banking issues. Multiple Google Cloud services went offline in the London region this ...

Pierluigi Paganini October 20, 2026
Data Breach
AfD Email Breach Exposes 421,000 Messages in Anonymous Online Archive

A data breach exposed AfD emails, while an anonymous site published AI summaries of 421,000 messages, raising questions about authenticity and privacy. Germany's Alternative für Deutschland (AfD) ...

Pierluigi Paganini October 20, 2026
Artificial Intelligence
Microsoft Treats AI Agents as Insider Threats in New Security Framework

Microsoft urges organizations to secure AI Agents as insider threats, using dynamic permissions, continuous risk monitoring and automated containment. Microsoft published a detailed blog post expl ...

Pierluigi Paganini October 20, 2026
Hacking
Plex2Shell Exploit Used to Turn Vulnerable Plex Servers Into Crypto Miners

Attackers exploit Plex2Shell flaws to install crypto miners and proxy software. Admins should update their Plex Media Server. Plex Media Server is designed to make movies, music, and other media a ...

Pierluigi Paganini October 19, 2026
Artificial Intelligence
Meta wants to scrape your website to train its AI, and you can't say no

Meta wants the right to scrape your website for AI training. If you have a business account, that includes you. At the end of the month, Meta plans to change its commercial terms in a way that mat ...

Pierluigi Paganini October 19, 2026
Uncategorized
Deepfakes and Election Manipulation: UK Watchdog Seeks Faster Detection

The UK Electoral Commission is building an AI system to alert candidates to damaging deepfakes within three hours. The UK's Electoral Commission is building an AI-powered system to tell candidate ...

Pierluigi Paganini October 19, 2026
Hacking
Big Fish: OpenBSD Root Exploit Chains a 37-Year-Old BSD Bug With a Kernel Flaw

OpenBSD flaws, including a 37-year-old BSD bug, enable local attackers to bypass security protections and gain root access. Patches are available. Cybersecurity firm Calif published a full exploit ...

Pierluigi Paganini October 19, 2026
Hacking
Attackers Abuse Stolen ConnectWise Application Credentials to Target Microsoft 365

Attackers stole ConnectWise application credentials to access Microsoft 365 tenants, prompting the company to suspend cloud services. ConnectWise suspended its Cloud Backup service and took both S ...

Pierluigi Paganini October 19, 2026
Security
Japan's SiteGuard WAF flaw CVE-2026-106931 is already being exploited

Attackers are exploiting vulnerability CVE-2026-106931 in SiteGuard Server Edition to run commands as root or SYSTEM. EG Secure Solutions published an urgent alert warning of CVE-2026-106931, an O ...

Pierluigi Paganini October 19, 2026
Internet of Things
16-Year-Old Broadcom Wi-Fi Bug Lets Attackers Take Over Routers Without a Password

A Broadcom Wi-Fi flaw dating back to 2010 allows attackers within Wi-Fi range to execute code on vulnerable routers without authentication. Researcher Quentin Kaiser presented a talk at Hexacon in ...

Pierluigi Paganini October 19, 2026
Artificial Intelligence
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 4

Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, ...

Pierluigi Paganini October 18, 2026