SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 120
This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Security Affairs newsletter Round 601 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 601 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini October 25, 2026 A new round of...
OpenAI Paused Frontier AI Training After a Security Incident
OpenAI Paused Frontier AI Training After a Security Incident Pierluigi Paganini October 25, 2026 OpenAI paused frontier model training for...
Should Government Websites Block Personal AI Agent Transactions?
Over the past few weeks, global banks and other companies that conduct online transactions have been ringing alarm bells about...
OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL)...
Node2Shell flaw embedded in apps and dev tools far beyond Node.js
The recently publicised high severity vulnerability in a popular Google-developed compression library reaches well beyond the open source Node.js JavaScript...
Pierluigi Paganini answers questions about the PHP2Shell flaws
Pierluigi Paganini answers questions about the PHP2Shell flaws Pierluigi Paganini October 24, 2026 Pierluigi Paganini answers questions about the PHP2Shell...
OpenAI’s textGrain Watermark: What EU Deployers Must Know Right Now
Last Updated: 23 October 2026In its October 5, 2026 announcement, OpenAI described textGrain as an invisible statistical watermark based on...
U.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini October 24, 2026 U.S. Cybersecurity and Infrastructure...
Usage Intelligence: The Monetization Signal Most AI Companies Are Ignoring
Usage Intelligence: The Monetization Signal Most AI Companies Are Ignoring Pierluigi Paganini October 24, 2026 AI companies need usage data...
The PHP Meltdown Shows How AI Makes Bugs More Exploitable
Security researchers used AI tools to help uncover years-old vulnerabilities in the PHP web scripting language. Then the AI-assisted attacks...
Capcom Data Breach Exposes 11.7 Million Email Addresses
Capcom Data Breach Exposes 11.7 Million Email Addresses Pierluigi Paganini October 24, 2026 Capcom disclosed a data breach exposing 11.7...
U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini October 24, 2026 U.S. Cybersecurity and...
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and brotlicffi packages,...
Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May...