MUST READ

The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet

 | 

Attackers Exploit Critical Cisco FMC Flaw to deploy Qilin ransomware

 | 

UK Council Attack Linked to Mass Exploitation of SonicWall Flaw

 | 

U.S. CISA adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog

 | 

More Capable AI, Not Enough Guardrails

 | 

A New Claude 's Sandbox Failure Shows How AI Can Rationalize Real-World Harm

 | 

U.S. CISA adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalog

 | 

Four Nation-State Actors Used the Same Chrome Zero-Day Exploit Kit Within 12 Days

 | 

US Agencies Warn Chinese AI Firms Are Extracting Advanced AI Models

 | 

Google fixes the seventh actively exploited Chrome zero-day of 2026

 | 

PoisonedRefresh: A Fileless Linux Rootkit That Injects PHP Web Shells Into F5 BIG-IP APM Server Memory

 | 

Chaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-Day

 | 

Microsoft’s Biggest Patch Tuesday: 974 CVEs, 2 Zero-Days and 20 Wormable Bugs

 | 

Hackers Drain $320 Million From Liquid Network, Then Return Most of It

 | 

WeChat Worm Can Hijack Accounts Without Victims Answering Calls

 | 

Massive Vietnam-Linked APIS Database Exposes Passport and Flight Data

 | 

North Korea-linked Hackers Hide a Backdoor Inside HAProxy

 | 

IT Help Desk Impersonation Lets Hackers Bypass MFA

 | 

Condé Nast Data of 32.8 Million Users Offered for Sale After WIRED Leak

 | 

StyleSmuggler: The Magento Zero-Day Behind New Store Attacks

 | 

NoviSpy spyware

Pierluigi Paganini September 03, 2026
Pegasus and NoviSpy Used Against Serbian Protesters

Serbian activists were targeted with zero-click Pegasus and NoviSpy spyware, exposing a major surveillance campaign ahead of elections. A member of Serbia’s student protest movement had their iPhone infected with NSO Group‘s Pegasus spyware without ever clicking a link or opening a file. The Citizen Lab confirmed the infection in collaboration with the SHARE Foundation, […]

Pierluigi Paganini December 16, 2024
Report claims that Serbian authorities abused Cellebrite tool to install NoviSpy spyware

Researchers warn of previously undetected surveillance spyware, named NoviSpy, that was found infecting a Serbian journalist’s phone. In February 2024, Serbian journalist Slaviša Milanov was summoned to a police station after a routine traffic stop. After the police released him, Milanov noticed suspicious changes to his phone settings, such as disabled data and Wi-Fi. Then […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet

Artificial Intelligence / September 11, 2026

Attackers Exploit Critical Cisco FMC Flaw to deploy Qilin ransomware

Cyber Crime / September 11, 2026

UK Council Attack Linked to Mass Exploitation of SonicWall Flaw

Hacking / September 11, 2026

U.S. CISA adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog

Security / September 10, 2026

More Capable AI, Not Enough Guardrails

Artificial Intelligence / September 10, 2026