MUST READ

Contagious Interview: 30,000 devices infected by a fake job interview

 | 

Google Fined €403 Million Over Location Data Practices

 | 

Foreign Hackers Target Two Colorado Water Utilities

 | 

ChainScript: the RAT that hides its command server inside a blockchain contract

 | 

A BYD Shark 6 Hack Shows the Risks of Connected Cars

 | 

The Target Is No Longer the Model. It’s the Agent.

 | 

UK Police Data Faces Long-Standing Microsoft Cloud Security Concerns

 | 

U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog

 | 

AI Hallucinations Nearly Triggered a US-China Military Confrontation

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 115

 | 

Security Affairs newsletter Round 595 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

Google Gemini also Broke Out of Its Test Environment

 | 

AI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum

 | 

Brevo Supply-Chain Attack Infected Over 100,000 Websites

 | 

Gyazo Data Breach Exposes 23 Million User Records

 | 

RatHat Turns Android Accessibility Into an Attack Weapon

 | 

Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution

 | 

OpenAI admits its models lie to cover their own mistakes

 | 

Cyberattacks on Oil Tankers Put Maritime Critical Infrastructure at Risk

 | 

SilkParasite Infrastructure Links SpiceRAT to Central Asian Targets

 | 

laptop farms

Pierluigi Paganini September 22, 2026
Contagious Interview: 30,000 devices infected by a fake job interview

North Korea-linked WaterPlum runs the Contagious Interview campaign, infecting over 30,000 devices using a fake job interview. On September 18, Japan’s National Police Agency, the FBI, the US Department of Defense’s Cyber Crime Center, and intelligence agencies from Australia and Germany published a joint advisory about a group called WaterPlum, better known as Contagious Interview. […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

Contagious Interview: 30,000 devices infected by a fake job interview

Uncategorized / September 22, 2026

Google Fined €403 Million Over Location Data Practices

Laws and regulations / September 21, 2026

Foreign Hackers Target Two Colorado Water Utilities

ICS-SCADA / September 21, 2026

ChainScript: the RAT that hides its command server inside a blockchain contract

Malware / September 21, 2026

A BYD Shark 6 Hack Shows the Risks of Connected Cars

Hacking / September 21, 2026