MUST READ

Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers

 | 

NIS2 Makes Board Members Personally Liable for Access Control Decisions

 | 

Apple’s spyware notifications reach the Bundestag: what the BSI says to do now

 | 

VOLTA, the infostealer that asks an AI which victims are worth the effort

 | 

New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia

 | 

Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens

 | 

Chainalysis Investigates Security Incident Involving AI-Driven Attack Techniques

 | 

FBI Blames North Korea for $6 Billion Binance Crypto Theft

 | 

SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 6

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 121

 | 

Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

SMS of Death: Android under attack, an invisible SMS can block calls and emergency services

 | 

U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog

 | 

Attackers Exploit Critical Drupal Commerce Core Vulnerability CVE-2026-118539

 | 

Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries

 | 

U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog

 | 

$6.3 Billion Stolen from Binance in Attack Attributed to North Korea

 | 

How to prioritize remediation after a pentest: a practitioner workflow

 | 

Hacker leaks data on more than 40,000 Homeland Security employees

 | 

Binance Investigates Suspicious Crypto Transfers Worth Up to $5.8 Billion

 | 

Videostrong

Pierluigi Paganini November 03, 2026
Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers

Google dismantled a 1.3 million-device botnet allegedly built by Android TV box maker Videostrong to enable ad fraud and proxy abuse. Google and its partners dismantled a backdoor called XCPE that had enrolled more than 1.3 million set-top boxes in a botnet. The result of the investigation into the malware operation is the striking part: […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers

Malware / November 03, 2026

NIS2 Makes Board Members Personally Liable for Access Control Decisions

Laws and regulations / November 03, 2026

Apple’s spyware notifications reach the Bundestag: what the BSI says to do now

Intelligence / November 03, 2026

VOLTA, the infostealer that asks an AI which victims are worth the effort

Malware / November 02, 2026

New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia

Security / November 02, 2026