MUST READ

Alleged Żabka Breach Exposes Jira Data, Source Code, and API Keys

 | 

Ruby on Rails Patches Critical Active Storage Vulnerability Affecting Image Processing

 | 

CareCloud Breach Exposes Medical and Financial Data of 345,000

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 108

 | 

Security Affairs newsletter Round 588 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

CISA Urges Utilities to Remove Internet-Exposed PLCs After Minnesota Attacks

 | 

Russian Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Tokens

 | 

Adobe fixed a maximum-severity vulnerability flaw in Campaign Classic

 | 

South Korea Warns of State-Backed Watering Hole Attacks

 | 

Google AI Supercharges Chrome Security, Fixing 1,072 Bugs

 | 

What an LLM Can Find: A Practical, Cheap Path to Code-level Threat Discovery

 | 

Anthropic Finds Claude Breached Real Companies During Security Evaluations

 | 

SilverFox Targets Japanese Manufacturer With Advanced ValleyRAT Campaign

 | 

Why brand impersonation is becoming an initial access vector

 | 

Cybercriminals Are Leveraging Autonomous AI Offensive Security Agents

 | 

Analog Devices Discloses Data Breach After Unauthorized System Access

 | 

FCC Restricts New Foreign Robots and Inverters Over Security Risks

 | 

U.S. CISA adds a Cisco Secure Firewall Management Center (FMC) flaw to its Known Exploited Vulnerabilities catalog

 | 

eSIM Plus and Nicegram Share Belarus-Linked Codebase, Analysis Finds

 | 

Claude Mythos Shows AI Can Outpace Human Cryptography Research

 | 

LATEST NEWS

VIEW ALL
Data Breach
Alleged Żabka Breach Exposes Jira Data, Source Code, and API Keys
Pierluigi Paganini August 03, 2026

Alleged Żabka data leak offered for €5,000 includes Jira data, GitLab repos, and secrets; researchers verified much of the sample. A brand-new forum account showed up on August 2, posted once, ...

Security
Ruby on Rails Patches Critical Active Storage Vulnerability Affecting Image Processing
Pierluigi Paganini August 03, 2026

Ruby on Rails fixed a critical vulnerability that could let unauthenticated attackers read files and achieve remote code execution. Ruby on Rails has patched CVE-2026-66066, a critical vulnerabili ...

Cyber Crime
CareCloud Breach Exposes Medical and Financial Data of 345,000
Pierluigi Paganini August 02, 2026

CareCloud disclosed a breach affecting 345,000 people after hackers stole medical and financial data from its AWS-hosted systems. TechCrunch reports that CareCloud, the New Jersey-based health tec ...

Security
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 108
Pierluigi Paganini August 02, 2026

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter TAG-195 Upgrades MaaS Ecosystem with Mod ...

top articles

Hackers access Booking.com user data, company secures systems
April 13, 2026
Inside ZionSiphon: politically driven malware aims at Israeli water systems
April 17, 2026
RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
April 23, 2026
Checkmarx supply chain attack impacts Bitwarden npm distribution path
April 24, 2026
Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed
April 26, 2026

newsletter

Subscribe to my email list and stay
up-to-date!

most popular

VIEW ALL
Data Breach

Alleged Żabka Breach Exposes Jira Data, Source Code, and API Keys

August 03, 2026

Security
Ruby on Rails Patches Critical Active Storage Vulnerability Affecting Image Processing

August 03, 2026

Cyber Crime
CareCloud Breach Exposes Medical and Financial Data of 345,000

August 02, 2026

Security
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 108

August 02, 2026

Security
Security Affairs newsletter Round 588 by Pierluigi Paganini – INTERNATIONAL EDITION

August 02, 2026

recent articles

Data Breach
Alleged Żabka Breach Exposes Jira Data, Source Code, and API Keys

Alleged Żabka data leak offered for €5,000 includes Jira data, GitLab repos, and secrets; researchers verified much of the sample. A brand-new forum account showed up on August 2, posted once, ...

Pierluigi Paganini August 03, 2026
Security
Ruby on Rails Patches Critical Active Storage Vulnerability Affecting Image Processing

Ruby on Rails fixed a critical vulnerability that could let unauthenticated attackers read files and achieve remote code execution. Ruby on Rails has patched CVE-2026-66066, a critical vulnerabili ...

Pierluigi Paganini August 03, 2026
Cyber Crime
CareCloud Breach Exposes Medical and Financial Data of 345,000

CareCloud disclosed a breach affecting 345,000 people after hackers stole medical and financial data from its AWS-hosted systems. TechCrunch reports that CareCloud, the New Jersey-based health tec ...

Pierluigi Paganini August 02, 2026
Security
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 108

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter TAG-195 Upgrades MaaS Ecosystem with Mod ...

Pierluigi Paganini August 02, 2026
Security
Security Affairs newsletter Round 588 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini August 02, 2026
ICS-SCADA
CISA Urges Utilities to Remove Internet-Exposed PLCs After Minnesota Attacks

After attacks hit 30+ Minnesota water systems, CISA urged utilities to remove internet-exposed PLCs and strengthen OT security. Between Sunday and Monday, July 26 and 27, a coordinated cyberattack ...

Pierluigi Paganini August 02, 2026
APT
Russian Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Tokens

Microsoft says Russian hackers hijacked hotel Wi-Fi portals to spread malware and steal Microsoft 365 tokens from travelers. Microsoft Threat Intelligence disclosed CaptiveCrunch, a campaign it at ...

Pierluigi Paganini August 01, 2026
Security
Adobe fixed a maximum-severity vulnerability flaw in Campaign Classic

Adobe fixed a maximum severity vulnerability in Campaign Classic that could let attackers run code remotely without user interaction. Adobe has addressed a critical vulnerability, tracked as CVE-2 ...

Pierluigi Paganini August 01, 2026
APT
South Korea Warns of State-Backed Watering Hole Attacks

South Korea warned that nation-state actors are using phishing and compromised websites to silently infect citizens and businesses. South Korea agencies (The National Intelligence Service, the Nat ...

Pierluigi Paganini July 31, 2026
Artificial Intelligence
Google AI Supercharges Chrome Security, Fixing 1,072 Bugs

Google says AI found and helped fix 1,072 Chrome security bugs in two releases, dramatically accelerating vulnerability detection and patching Google's Chrome Security team published a detailed ac ...

Pierluigi Paganini July 31, 2026
Artificial Intelligence
What an LLM Can Find: A Practical, Cheap Path to Code-level Threat Discovery

An AI-assisted audit found 29 flaws in GlobaLeaks, showing LLMs make large-scale code reviews faster, cheaper, and accessible. GlobaLeaks, a mature whistleblowing platform that had already undergo ...

Pierluigi Paganini July 31, 2026
Security
Anthropic Finds Claude Breached Real Companies During Security Evaluations

Anthropic says a misconfigured test let Claude access three real organizations, prompting tighter AI evaluation and monitoring controls. Anthropic disclosed that Claude models had accessed the rea ...

Pierluigi Paganini July 31, 2026
APT
SilverFox Targets Japanese Manufacturer With Advanced ValleyRAT Campaign

SilverFox targeted a Japanese manufacturer with new DLL sideloading techniques, kernel drivers, and resilient ValleyRAT persistence mechanisms. Cato CTRL documented a new SilverFox campaign target ...

Pierluigi Paganini July 31, 2026
Hacking
Why brand impersonation is becoming an initial access vector

Brand impersonation now drives initial access, using fake sites and apps to deliver malware, making rapid takedowns essential to disrupt attacks. Attackers recently poisoned more than 700 websites ...

Pierluigi Paganini July 30, 2026
Artificial Intelligence
Cybercriminals Are Leveraging Autonomous AI Offensive Security Agents

Resecurity warns AI offensive agents are lowering hacking barriers, fueling an AI-driven race between attackers and defenders. Resecurity analyzed how autonomous offensive security agents such as ...

Pierluigi Paganini July 30, 2026
Data Breach
Analog Devices Discloses Data Breach After Unauthorized System Access

Chipmaker Analog Devices disclosed a data breach after detecting unauthorized access to systems on June 23. The investigation is ongoing. Semiconductor giant Analog Devices (ADI) disclosed a data ...

Pierluigi Paganini July 30, 2026
Security
FCC Restricts New Foreign Robots and Inverters Over Security Risks

The FCC added foreign robots and power inverters to its Covered List, while allowing security updates for existing authorized devices until 2029. The FCC just widened its Covered List again, this ...

Pierluigi Paganini July 30, 2026
Security
U.S. CISA adds a Cisco Secure Firewall Management Center (FMC) flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Cisco Secure Firewall Management Center (FMC) flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and In ...

Pierluigi Paganini July 30, 2026
Security
eSIM Plus and Nicegram Share Belarus-Linked Codebase, Analysis Finds

Analysis found eSIM Plus and Nicegram share a Belarus-linked codebase, while eSIM Plus routes data and calls through Russian services. Two popular apps available in EU app stores, Nicegram, with o ...

Pierluigi Paganini July 30, 2026
Artificial Intelligence
Claude Mythos Shows AI Can Outpace Human Cryptography Research

Claude Mythos found new flaws in HAWK and reduced AES, proving AI can autonomously advance cryptography research. Anthropic published two cryptographic research results achieved by Claude Mythos P ...

Pierluigi Paganini July 29, 2026