logo

Security Affairs

ID: 4591e57d-d939-5a9c-95b6-1894657d6f54

STIX ID: identity--4591e57d-d939-5a9c-95b6-1894657d6f54

Feed Type: rss

Earliest post: 2024-05-19

Latest post: 2026-08-27

Cybersecurity news, threat analysis, malware research, and breaking coverage from independent expert Pierluigi Paganini — covering cybercrime, APTs, breaches, policy, hacking, and security trends.

01/01/2020
08/28/2026
Title Date Published Describes IncidentAuthorVisible
Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback2026-08-27TruePierluigi PaganiniTrue
Australian Police Charge Two Over TeamPCP Credential Theft2026-08-27TruePierluigi PaganiniTrue
CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do2026-08-27TruePierluigi PaganiniTrue
OpenAI banned Russian ChatGPT accounts backing covert influence operation2026-08-27TruePierluigi PaganiniTrue
CISA Red Team Fully Compromised Two Critical Infrastructure Orgs2026-08-26TruePierluigi PaganiniTrue
FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure2026-08-26TruePierluigi PaganiniTrue
U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog2026-08-26TruePierluigi PaganiniTrue
88 ID Verification Breaches Show the Cost of Collecting Identity Data2026-08-26TruePierluigi PaganiniTrue
Operation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global Scams2026-08-26TruePierluigi PaganiniTrue
Norway ’s Digital Government Infrastructure Hit by a new DDoS Attack2026-08-25TruePierluigi PaganiniTrue
Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable2026-08-25TruePierluigi PaganiniTrue
U.S. CISA adds maximum-severity Oracle flaw to its Known Exploited Vulnerabilities catalog2026-08-25TruePierluigi PaganiniTrue
Fake Minecraft Sites Are Still Spreading WeedHack After C2 Takedown2026-08-25TruePierluigi PaganiniTrue
Slovakia Warns of Cyber Risks in Road Speed Cameras2026-08-24TruePierluigi PaganiniTrue
iAuthFlow v2: The $10,000 Phishing Toolkit That Survives Your Password Reset2026-08-24TruePierluigi PaganiniTrue
UK Power Plant Disabled for Four Days by Iran-Linked Hackers, Concurrent with US Water Attacks2026-08-23TruePierluigi PaganiniTrue
Security Affairs newsletter Round 591 by Pierluigi Paganini – INTERNATIONAL EDITION2026-08-23TruePierluigi PaganiniTrue
Zero-Click Grok Chat History Theft: Adversa AI Demonstrates Cryptographic Context Injection2026-08-23TruePierluigi PaganiniTrue
ToxicPanda 2.0 Gets a Major Upgrade, Expanding Attacks Across 16 Countries2026-08-22TruePierluigi PaganiniTrue
Malware Hijacks Android Car Head Units2026-08-22TruePierluigi PaganiniTrue
Critical Flaw in NASA/JPL Open-Source Spacecraft Command Software Allowed Unauthenticated Command Execution2026-08-22TruePierluigi PaganiniTrue
U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog2026-08-22TruePierluigi PaganiniTrue
Your Shredded Visa Card May Still Work at the Checkout2026-08-21TruePierluigi PaganiniTrue
Six Maximum-Severity Flaws Found in Cisco Products2026-08-21TruePierluigi PaganiniTrue
Fake Conferences, OAuth and WhatsApp: Inside Russia’s New Espionage Tactics2026-08-21TruePierluigi PaganiniTrue
GitLab Warns of Active Exploitation of Critical GraphQL Flaw2026-08-21TruePierluigi PaganiniTrue
Poland’s CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw2026-08-21TruePierluigi PaganiniTrue
U.S. CISA adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog2026-08-21TruePierluigi PaganiniTrue
Cl0p Targets 40+ Organizations Through PTC Windchill Flaw2026-08-21TruePierluigi PaganiniTrue
NSA, CISA, FBI, DOE, and EPA Warn of Active AI-Assisted Attacks on Siemens S7 PLCs2026-08-20TruePierluigi PaganiniTrue
U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog2026-08-20TruePierluigi PaganiniTrue
US Indicts 17 Iranians Over Years-Long Cyber Espionage Campaign2026-08-20TruePierluigi PaganiniTrue
StopAndProtect Turns 2,000 Hacked WordPress Sites Into a Criminal Network2026-08-20TruePierluigi PaganiniTrue
Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras2026-08-19TruePierluigi PaganiniTrue
Microsoft Tracks MacSync Stealer by Its Behavior, Not Its Domains2026-08-19TruePierluigi PaganiniTrue
50,000 Stripe Secrets Leaked in Public Code2026-08-19TruePierluigi PaganiniTrue
U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog2026-08-19TruePierluigi PaganiniTrue
Hackers Expose Data of 1.2 Million Heights Finance Customers2026-08-18TruePierluigi PaganiniTrue
GitLab Patches Critical Unauthenticated GraphQL Vulnerability2026-08-18TruePierluigi PaganiniTrue
U.S. CISA adds a Ray-Project Ray flaw to its Known Exploited Vulnerabilities catalog2026-08-18TruePierluigi PaganiniTrue
New Mirai-Based Evooo1Bot Botnet Targets Linux Devices2026-08-18TruePierluigi PaganiniTrue
SafePal Says 39,798 Customers Hit by Data Breach2026-08-17TruePierluigi PaganiniTrue
LiteLLM Supply-Chain Attack – Technology, Banking and Healthcare the Most Affected2026-08-17TruePierluigi PaganiniTrue
Invisible AI Prompts Trigger Court Sanctions2026-08-17TruePierluigi PaganiniTrue
McDonald’s Employee Data Appears in Leak, Seller Claims 1.7M Records Stolen2026-08-17TruePierluigi PaganiniTrue
Akira Ransomware Uses Safe Mode to Bypass EDR2026-08-17TruePierluigi PaganiniTrue
DDoS Attacks Cause Major Threema Outages2026-08-16TruePierluigi PaganiniTrue
Mustang Panda Upgrades CoolClient With a Kernel Rootkit2026-08-16TruePierluigi PaganiniTrue
Sophisticated Cyberattack Exposes Data of 678,000 French Taxpayers2026-08-16TruePierluigi PaganiniTrue
APT36 Suspected in PATCHCORD Espionage Campaign Using Google Sheets C22026-08-16TruePierluigi PaganiniTrue

1–50 of 1012