MUST READ

ChainScript: the RAT that hides its command server inside a blockchain contract

 | 

A BYD Shark 6 Hack Shows the Risks of Connected Cars

 | 

The Target Is No Longer the Model. It’s the Agent.

 | 

UK Police Data Faces Long-Standing Microsoft Cloud Security Concerns

 | 

U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog

 | 

AI Hallucinations Nearly Triggered a US-China Military Confrontation

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 115

 | 

Security Affairs newsletter Round 595 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

Google Gemini also Broke Out of Its Test Environment

 | 

AI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum

 | 

Brevo Supply-Chain Attack Infected Over 100,000 Websites

 | 

Gyazo Data Breach Exposes 23 Million User Records

 | 

RatHat Turns Android Accessibility Into an Attack Weapon

 | 

Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution

 | 

OpenAI admits its models lie to cover their own mistakes

 | 

Cyberattacks on Oil Tankers Put Maritime Critical Infrastructure at Risk

 | 

SilkParasite Infrastructure Links SpiceRAT to Central Asian Targets

 | 

NightmareStresser Goes Offline in Global DDoS-for-Hire Crackdown

 | 

U.S. CISA adds Acronis Backup, Cisco ISE, and Google Pixel flaws to its Known Exploited Vulnerabilities catalog

 | 

Chosen Brick, Iran's Surveillance Malware

 | 

ShieldBreak

Pierluigi Paganini September 09, 2026
Chaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-Day

The researcher Chaotic Eclipse released ShieldCrash, a PoC exploit for a Microsoft Defender Zero-Day vulnerability. Security researcher Chaotic Eclipse, also known as INFINITE NIGHTMARE, MSNightmare and Nightmare-Eclipse, released a new zero-day exploit targeting Microsoft Defender. The researcher named the exploit ShieldCrash, it triggers an arbitrary file read as SYSTEM. The researcher claims that Microsoft has not fully […]

Pierluigi Paganini August 12, 2026
ShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet Patch

Chaotic Eclipse released a PoC for ShieldBreak, a Microsoft Defender zero-day that bypasses the CVE-2026-50656 patch and could enable SYSTEM-level code execution. Security researcher Chaotic Eclipse, also known as INFINITE NIGHTMARE, MSNightmare and Nightmare-Eclipse, released a PoC for ShieldBreak, a Microsoft Defender zero-day. The flaw bypasses the patch for CVE-2026-50656 (RoguePlanet), a race condition that […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

ChainScript: the RAT that hides its command server inside a blockchain contract

Malware / September 21, 2026

A BYD Shark 6 Hack Shows the Risks of Connected Cars

Hacking / September 21, 2026

The Target Is No Longer the Model. It’s the Agent.

Artificial Intelligence / September 21, 2026

UK Police Data Faces Long-Standing Microsoft Cloud Security Concerns

Uncategorized / September 21, 2026

U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog

Security / September 20, 2026