LATEST NEWS

VIEW ALL
Lizard Squad reveals itself. What to learn from the attack?
Pierluigi Paganini December 28, 2014

Sky News has interviewed one of the members of Lizard Squad that explained the motivation of the recent cyber attacks. What to learn from the attack? The Lizard Squad team is the hacking collective t ...

Lavish Cars with Wireless Technology and Dashboards Can Be Hacked
Pierluigi Paganini December 28, 2014

Hackers have now got the knowledge and ability to track down dashboard technology and intercept crucial info from cars and especially luxury ones. It has been reported that cars wit fitted wireless t ...

Alleged Anonymous members leaked 13000 credentials for popular websites
Pierluigi Paganini December 28, 2014

A group of hackers claiming to be members of the collective Anonymous has released online a lot of 13,000 passwords and credit cards for popular websites. Hackers claiming to be members of the po ...

TorrentLocker ransomware campaign hit Spain and Italy
Pierluigi Paganini December 27, 2014

Experts at S21sec firm recently detected a new ransomware campaign based on TorrentLocker that infected users prevalently in Italy and Spain. The last report published by Trend Micro revealed that ra ...

recent articles

Security
U.S. CISA adds Microsoft WSUS, and Adobe Commerce and Magento Open Source flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft WSUS, and Adobe Commerce and Magento Open Source flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cyberse ...

Pierluigi Paganini October 24, 2025
Hacking
Summoning Team won Master of Pwn as Pwn2Own Ireland Rewards $1,024,750

The Pwn2Own Ireland hacking contest awarded a total $1,024,750 for 73 zero-days, the Summoning Team won Master of Pwn. Pwn2Own Ireland 2025 wrapped up with $1,024,750 awarded for 73 unique zero-da ...

Pierluigi Paganini October 24, 2025
Security
China-linked hackers exploit patched ToolShell flaw to breach Middle East telecom

China-based threat actors exploited ToolShell SharePoint flaw CVE-2025-53770 soon after its July patch. China-linked threat actors exploited the ToolShell SharePoint flaw vulnerability, tracked a ...

Pierluigi Paganini October 24, 2025
Hacking
Pwn2Own Day 2: Organizers paid $792K for 56 0-days

Day Two of Pwn2Own Ireland 2025 saw $792K for 56 0-days, led by The Summoning Team after a major Samsung Galaxy exploit. Day Two of Pwn2Own Ireland 2025 ends with participants earning $792,750 for ...

Pierluigi Paganini October 23, 2025
APT
Lazarus targets European defense firms in UAV-themed Operation DreamJob

North Korean Lazarus hackers targeted 3 European defense firms via Operation DreamJob, using fake recruitment lures to hit UAV tech staff. North Korea-linked Lazarus APT group (aka Hidden Cobra) l ...

Pierluigi Paganini October 23, 2025
Breaking News
U.S. CISA adds Motex LANSCOPE flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Motex LANSCOPE flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CIS ...

Pierluigi Paganini October 23, 2025
Hacking
Over 250 attacks hit Adobe Commerce and Magento via critical CVE-2025-54236 flaw

Hackers exploit CVE-2025-54236 in Adobe Commerce and Magento to hijack accounts via REST API. Over 250 attacks in 24 hours. E-commerce security company Sansec researchers warn that threat actors a ...

Pierluigi Paganini October 23, 2025
Security
Cyberattack on Jaguar Land Rover inflicts $2.5B loss on UK economy

The attack on Jaguar Land Rover costs the UK economy $2.5B, marking its most damaging cyber incident, says CMC. In early September, Jaguar Land Rover shut down systems to mitigate a cyberattack  ...

Pierluigi Paganini October 23, 2025
APT
PhantomCaptcha targets Ukraine relief groups with WebSocket RAT in October 2025

PhantomCaptcha phishing campaign hit Ukraine relief groups with a WebSocket RAT on Oct 8, 2025, targeting Red Cross, UNICEF, and others. SentinelOne researchers uncovered PhantomCaptcha, a coordin ...

Pierluigi Paganini October 22, 2025
Security
TP-Link urges immediate updates for Omada Gateways after critical flaws discovery

TP-Link warns of critical flaws in Omada gateways across ER, G, and FR models. Users should update firmware immediately to stay secure. TP-Link is warning users of critical flaws impacting its Oma ...

Pierluigi Paganini October 22, 2025
Hacking
TARmageddon flaw in Async-Tar Rust library allows to smuggle extra archives when the library is processing nested TAR files

CVE-2025-62518 TARmageddon flaw in Rust async-tar and forks like tokio-tar may allow remote code execution, says Edera. Edera team disclosed a vulnerability tracked as CVE-2025-62518 (CVSS score: ...

Pierluigi Paganini October 22, 2025
APT
Russia-linked COLDRIVER speeds up malware evolution after LOSTKEYS exposure

Russia-linked COLDRIVER rapidly evolved its malware since May 2025, refining tools just days after releasing its LOSTKEYS variant, says Google. The Russia-linked hacking group COLDRIVER has been q ...

Pierluigi Paganini October 22, 2025
Breaking News
Japanese retailer Muji halted online sales after a ransomware attack on logistics partner

Muji halted online sales after a ransomware attack on its logistics partner Askul, disrupting orders, app services, and website access. Japanese retailer giant Muji suspended online sales after a ...

Pierluigi Paganini October 21, 2025
Uncategorized
U.S. CISA adds Oracle, Windows, Kentico, and Apple flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Oracle, Windows, Kentico, and Apple flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructu ...

Pierluigi Paganini October 21, 2025
APT
China-Linked Salt Typhoon breaches European Telecom via Citrix exploit

China-linked Salt Typhoon hacked a European telecom in July 2025 via a Citrix NetScaler Gateway exploit for initial access. A European telecom firm was targeted in July 2025 by China-linked APT gr ...

Pierluigi Paganini October 21, 2025
Data Breach
Russian Lynk group leaks sensitive UK MoD files, including info on eight military bases

Russian hackers stole and leaked MoD files on eight RAF and Navy bases, exposing staff data in a “catastrophic” cyberattack via Dodd Group breach. Russian cybercrime group Lynx breached Dodd G ...

Pierluigi Paganini October 20, 2025
Uncategorized
CAPI Backdoor targets Russia’s auto and e-commerce sectors

A new campaign targets Russia’s auto and e-commerce sectors using a previously unknown .NET malware called CAPI Backdoor. Cybersecurity researchers at Seqrite Labs uncovered a new campaign, trac ...

Pierluigi Paganini October 20, 2025
Security
F5 breach exposes 262,000 BIG-IP systems worldwide

Over 262K F5 BIG-IP devices exposed after threat actors stole source code and data on undisclosed flaws in a recent F5 breach. Over 262,000 F5 BIG-IP devices are exposed online after F5 confirmed ...

Pierluigi Paganini October 20, 2025
Intelligence
China finds “irrefutable evidence” of US NSA cyberattacks on time Authority

China claims the US NSA hacked its National Time Service Center by exploiting staff phone flaws since March 2022, stealing sensitive data. China’s Ministry of State Security announced it has fou ...

Pierluigi Paganini October 20, 2025
Malware
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 67

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Astaroth: Banking Trojan Abusing GitHub ...

Pierluigi Paganini October 19, 2025