LATEST NEWS

VIEW ALL
Law enforcement and Microsoft join forces to dismantle botnet using LED Light Control Console
Pierluigi Paganini April 20, 2020

Cybercriminals have abused LED light control console to launch malicious attacks, Microsoft’s security experts warn. Microsoft researchers shared details of a new incident discovered in Taiwan, ...

US Government concerned by cyber attacks on Czech hospitals during COVID19 crisis
Pierluigi Paganini April 20, 2020

US Secretary of State Mike Pompeo expressed concerns for cyber cyber attacks that have targeted Czech hospitals involved in the fight against the Coronavirus. US Secretary of State Mike Pompeo exp ...

Proposed government Coronavirus contact tracing app leaked data
Pierluigi Paganini April 20, 2020

A contact tracking app for the Coronavirus proposed to the government of the Netherlands is affected by security issues that could expose user data. Technologies play a crucial role in the contain ...

Uniswap and Lendf.me hacked, attacker stole $25 million worth of cryptocurrency
Pierluigi Paganini April 20, 2020

Hackers have stolen more than $25 million worth of cryptocurrency from the Uniswap exchange and the Lendf.me lending platform. Bad news from cryptocurrency industry, hackers have stolen more than ...

recent articles

Data Breach
CEVA Logistics Cyberattack Disrupts European Warehouses and Shipments

CEVA Logistics suffered a cyberattack disrupting European operations, with eight warehouses affected and shipments halted at impacted sites. CEVA Logistics suffered a cyberattack on July 29 that d ...

Pierluigi Paganini August 12, 2026
APT
China-Linked Hackers Use AI Agents in Autonomous Attack on Taiwan

China-linked hackers reportedly used eight AI agents to breach a government network, steal data and compromise accounts with minimal human oversight. Israeli cybersecurity firm Dream documented wh ...

Pierluigi Paganini August 12, 2026
Malware
Kimwolf v7 Hides DDoS Traffic Behind Chrome Fingerprints and Ethereum

Kimwolf v7: The Android TV Botnet That Now Hides Its Traffic Behind Chrome Fingerprints and Ethereum Palo Alto Networks Unit 42 discovered Kimwolf v7 on February 3, 2026, while hunting threats fol ...

Pierluigi Paganini August 12, 2026
Security
Microsoft Patch Tuesday for August 2026 Fixed a Zero-Day and Wormable RCE

Microsoft Patch Tuesday for August 2026 fixes 398 CVEs, including an actively exploited zero-day and a wormable DNS flaw enabling remote code execution. Microsoft released its Patch Tuesday securi ...

Pierluigi Paganini August 12, 2026
Hacking
Zoom Patches “Zoomsday” Zero-Click Flaw Enabling Remote Code Execution

Zoom patches a zero-click flaw that could let a meeting participant execute code on another user’s computer through the annotation feature. Zoom has patched four vulnerabilities, including a cri ...

Pierluigi Paganini August 11, 2026
Security
ExfilSquad Targets New Victims, Shares Data via Torrents

ExfilSquad targets 13 organizations, exploiting cloud portals for data theft and using torrents to spread stolen information and amplify damage. Resecurity is tracking the activity of ExfilSquad - ...

Pierluigi Paganini August 11, 2026
Hacking
Iran-Linked Hackers Target More US Water Infrastructure in New Jersey and Alabama

Iran-linked hackers targeted Water Infrastructure in New Jersey and Alabama, bringing confirmed attacks to at least 12 states, with limited disruption. The wave of cyberattacks targeting US water ...

Pierluigi Paganini August 11, 2026
Artificial Intelligence
The inconvenient truth about AI pentesting: someone has to check all the work

AI pentesting can flood teams with findings they cannot validate. The real challenge is managing “validation debt” as discovery scales. AI pentesting has a 'Sorcerer's Apprentice' problem. Enc ...

Pierluigi Paganini August 11, 2026
Security
Cisco Warns of Seven ClamAV Flaws, Two With Public PoCs

Cisco warns that seven ClamAV flaws affect Secure Endpoint Connector products, with two having public PoCs that could enable remote DoS attacks. Cisco warned that seven ClamAV vulnerabilities affe ...

Pierluigi Paganini August 11, 2026
Hacking
Gym Booking Task Turns Into Real-World AI Cyberattack

An AI agent hacked a gym booking system while trying to help a user, booking early and removing another person from the waitlist. An Australian man asked his AI assistant to book him into a gym cl ...

Pierluigi Paganini August 10, 2026
Security
Hackers Cross From IT to OT Through a Private APN in Poland

Attackers breached a Polish CHP plant through a Fortinet device and private APN, reaching PLCs and disrupting turbine and water treatment systems. Poland’s CERT has described a second attack on ...

Pierluigi Paganini August 10, 2026
Cyber Crime
9.2 Million Israeli Records Sold as a New Breach Are 20 Years Old

A seller claims to offer Israel’s 2026 population registry, but checks show the 9.2 million records are authentic data dating back to 2005. A vendor on a well-known leak forum claims to have bre ...

Pierluigi Paganini August 10, 2026
Artificial Intelligence
OpenAI Pauses Astra Model Over Critical Cybersecurity Risk Concerns

OpenAI paused work involving Astra after tests showed cybersecurity abilities that could approach its Critical risk threshold under the company’s framework. OpenAI disclosed that internal evalua ...

Pierluigi Paganini August 10, 2026
Artificial Intelligence
A GitHub Misconfiguration Let Kimi K3 Cheat a Cybersecurity Benchmark

Kimi K3 bypassed a UK cybersecurity test by accessing GitHub, cloning the benchmark and reading its solutions instead of solving the challenge Sometimes the smartest move isn't solving the puzzle, ...

Pierluigi Paganini August 10, 2026
Cyber Crime
U.S. Defense Manufacturer IEH Hit by Phishing Attack, Exposing Potentially Export-Controlled Data

IEH was breached by a phishing attack that exposed its Microsoft 365 inbox, including emails and potentially export-controlled military data. IEH Corporation is a U.S. defense and aerospace manufa ...

Pierluigi Paganini August 09, 2026
Malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 109

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Fake Xeno Roblox Cheats Deliver Powerful ...

Pierluigi Paganini August 09, 2026
Security
Security Affairs newsletter Round 589 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini August 09, 2026
Hacking
Webmail CSS Attacks Expose a New Risk for AI-Powered Email Tools

CSS attacks on major webmail services can steal credentials, hijack sessions and manipulate AI tools connected to users’ inboxes. PortSwigger researcher Gareth Heyes demonstrated something that ...

Pierluigi Paganini August 09, 2026
Intelligence
Palo Alto Networks Faces China Cybersecurity Review Amid Rising Tech Tensions

China opened a cybersecurity review of Palo Alto Networks, citing national security concerns but giving no details about the reasons behind the probe. China’s Cyberspace Administration (CAC) ann ...

Pierluigi Paganini August 08, 2026
Hacking
Metabase Zero-Day Exploited in the Wild, Exposing Admin Access and Sensitive Data

Attackers exploited a CVSS 10 Metabase zero-day to gain admin access and steal sensitive data. Framework confirmed it was among the victims. Metabase just confirmed something no analytics vendor w ...

Pierluigi Paganini August 08, 2026