MUST READ

U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog

 | 

U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog

 | 

Cryptocurrency exchange Bitget Says North Korea-Linked Hackers Stole $351.6 Million

 | 

ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer

 | 

AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway

 | 

U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog

 | 

Ryuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison

 | 

AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS

 | 

OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research

 | 

CLOSEDQUORUM, the malware that asks four AI models what to do next

 | 

U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog

 | 

F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks

 | 

ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack

 | 

EvilTokens made phishing-as-a-service look easy. Then it got taken down

 | 

Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools

 | 

CVE-2026-87902: how close is your WordPress to remote code execution?

 | 

Check Point Fixes a New Actively Exploited Critical Security Flaw

 | 

Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day

 | 

Public PoC Exposes Critical Veeam Agent Privilege Escalation

 | 

U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog

 | 

LATEST NEWS

VIEW ALL
Hacking
PaperCut Zero-Day Under Active Attack: Emergency Patch Released
Pierluigi Paganini August 28, 2026

PaperCut warns that a zero-day in NG and MF is being exploited. The company already release emergency patches to address it. PaperCut Software warns that attackers are actively exploiting a zero-d ...

Hacking
U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog
Pierluigi Paganini August 28, 2026

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities ...

Data Breach
Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports
Pierluigi Paganini August 28, 2026

A cyberattack on Manchester Airports Group exposed data of 8.7 million customers across Manchester, Stansted, and East Midlands airports. Manchester Airports Group disclosed that an unauthorised t ...

APT
Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback
Pierluigi Paganini August 27, 2026

Dark Caracal targets Venezuela with GoCaracal, an upgraded Bandook toolkit and an Ethereum fallback for resilient C2 communications. Dark Caracal is back with new malware and the same hunting grou ...

top articles

Hackers access Booking.com user data, company secures systems
April 13, 2026
Inside ZionSiphon: politically driven malware aims at Israeli water systems
April 17, 2026
RAMP Uncovered: Anatomy of Russia’s Ransomware Marketplace
April 23, 2026
Checkmarx supply chain attack impacts Bitwarden npm distribution path
April 24, 2026
Critical CrowdStrike LogScale bug could have allowed file access, but no exploitation was observed
April 26, 2026

newsletter

Subscribe to my email list and stay
up-to-date!

most popular

VIEW ALL
Security

U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog

September 26, 2026

Hacking
U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog

September 25, 2026

Cyber Crime
Cryptocurrency exchange Bitget Says North Korea-Linked Hackers Stole $351.6 Million

September 25, 2026

Malware
ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer

September 25, 2026

Malware
AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway

September 25, 2026

recent articles

Security
U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds WordPress flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CIS ...

Pierluigi Paganini September 26, 2026
Hacking
U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft SharePoint and Mikrotik RouterOS flaws flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and ...

Pierluigi Paganini September 25, 2026
Cyber Crime
Cryptocurrency exchange Bitget Says North Korea-Linked Hackers Stole $351.6 Million

Bitget says suspected North Korea-linked actors stole $351.6M from hot and warm wallets. Withdrawals were suspended while Mandiant investigates. Cryptocurrency exchange Bitget says suspected North ...

Pierluigi Paganini September 25, 2026
Malware
ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer

Attackers hijacked Ukrainian websites to deliver a fake Cloudflare CAPTCHA that installs Psychedelic Stealer and steals browser and crypto credentials. Psychedelic Stealer is being distributed thr ...

Pierluigi Paganini September 25, 2026
Malware
AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway

CARBONATO exploits exposed Docker daemons, installs an AI agent, steals API keys and spreads across networks with autonomous command execution. CARBONATO is a Docker-based botnet that has been act ...

Pierluigi Paganini September 25, 2026
Hacking
U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (C ...

Pierluigi Paganini September 25, 2026
Cyber Crime
Ryuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison

Ryuk member Karen Vardanyan was sentenced to 24 months in U.S. prison after extradition from Ukraine and ordered to pay $1.2M in restitution. Karen Vardanyan, a 35-year-old Armenian citizen who we ...

Pierluigi Paganini September 24, 2026
Hacking
AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS

MikroTrick chains two RouterOS flaws to bypass authentication and gain admin access. AI helped researchers uncover the attack chain within days. MikroTik pushed out patches on September 3, 2026 fo ...

Pierluigi Paganini September 24, 2026
Artificial Intelligence
OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research

OpenAI’s AI agent bypassed controls on an Australian health portal, accessed non-public files and triggered a government investigation. An OpenAI AI agent bypassed access controls on an Australi ...

Pierluigi Paganini September 24, 2026
Malware
CLOSEDQUORUM, the malware that asks four AI models what to do next

Cisco Talos finds CLOSEDQUORUM, malware that lets four commercial AI models vote on its next move, with no human operator required. Cisco Talos found malware, dubbed CLOSEDQUORUM, that holds a vot ...

Pierluigi Paganini September 24, 2026
Hacking
U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog. The U.S. ...

Pierluigi Paganini September 23, 2026
Security
F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks

F5 warns of a critical BIG-IP APM zero-day, CVE-2026-94127, allowing remote code execution. Attackers are already exploiting it. F5 has released emergency security updates for a critical vulnerabi ...

Pierluigi Paganini September 23, 2026
Cyber Crime
ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack

ShinyHunters claims FBI breach via PeopleSoft zero-day, steals staff data; FBI investigating, no confirmation yet. The popular cybercrime group ShinyHunters is claiming that it breached the U.S. F ...

Pierluigi Paganini September 23, 2026
Cyber Crime
EvilTokens made phishing-as-a-service look easy. Then it got taken down

Microsoft, Coinbase and law enforcement took down EvilTokens, a phishing kit that compromised 12,000 inboxes through device-code phishing and AI. EvilTokens showed up in February 2026 and moved fa ...

Pierluigi Paganini September 23, 2026
Malware
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools

Attackers spoofed LastPass on GitHub, used a Microsoft-signed driver to disable 145 security products, then deployed an infostealer. Someone impersonated LastPass on GitHub, got users to download ...

Pierluigi Paganini September 23, 2026
Hacking
CVE-2026-87902: how close is your WordPress to remote code execution?

WordPress 7.1.2 fixes an unauthenticated file inclusion bug active since version 4.7, patchable but exploitable into remote code execution. WordPress 7.1.2 shipped on September 22 address an unaut ...

Pierluigi Paganini September 23, 2026
Security
Check Point Fixes a New Actively Exploited Critical Security Flaw

Check Point fixes an actively exploited flaw that lets unauthenticated attackers upload and run scripts on vulnerable Security Management Servers. Check Point has released emergency hotfixes for C ...

Pierluigi Paganini September 22, 2026
Hacking
Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day

The researcher Chaotic Eclipse released BigDiskBuster, a PoC exploit for a Windows Defender Update DoS Zero-Day vulnerability. Security researcher Chaotic Eclipse, also known as INFINITE NIG ...

Pierluigi Paganini September 22, 2026
Security
Public PoC Exposes Critical Veeam Agent Privilege Escalation

A Veeam Agent flaw lets local users gain SYSTEM privileges. A public PoC is available, raising the risk of exploitation on shared Windows systems. If you're running Veeam Agent on a Windows endpoi ...

Pierluigi Paganini September 22, 2026
Hacking
U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Zyxel flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added ...

Pierluigi Paganini September 22, 2026