PoisonedRefresh: A Fileless Linux Rootkit That Injects PHP Web Shells Into F5 BIG-IP APM Server Memory
PoisonedRefresh: A Fileless Linux Rootkit That Injects PHP Web Shells Into F5 BIG-IP APM Server Memory Pierluigi Paganini September 09,...
Security Blogs
Category Added in a WPeMatico Campaign
Chaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-Day
Chaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-Day Pierluigi Paganini September 09, 2026 The researcher Chaotic Eclipse released ShieldCrash, a...
Microsoft’s Biggest Patch Tuesday: 974 CVEs, 2 Zero-Days and 20 Wormable Bugs
Microsoft’s Biggest Patch Tuesday: 974 CVEs, 2 Zero-Days and 20 Wormable Bugs Pierluigi Paganini September 09, 2026 September 2026 Patch...
CRPx0 ransomware: what you need to know
CRPx0 is a cybercrime operation that started off operating a scam before pivoting into a fully-blown ransomware and cryptocurrency business....
Claude Fable Solves a Historical Cipher
Claude Fable Solves a Historical Cipher Claude Fable 5.1 solved a 370-year-old cipher in forty-four minutes. This tracks with what...
Hackers Drain $320 Million From Liquid Network, Then Return Most of It
Hackers Drain $320 Million From Liquid Network, Then Return Most of It Pierluigi Paganini September 08, 2026 Crypto exchange network...
WeChat Worm Can Hijack Accounts Without Victims Answering Calls
WeChat Worm Can Hijack Accounts Without Victims Answering Calls Pierluigi Paganini September 08, 2026 Researchers built a WeChat worm that...
Microsoft Plugs Nearly 1,000 Security Holes
Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software,...
The US military just turned off ad tracking on its phones. Maybe you should too
Branches of the US military have reportedly disabled ad-tracking on government-issued phones and computers, following concerns that commercially-available location data...
AIs as Modern Genies
AIs as Modern Genies This essay was written with Barath Raghavan, and originally appeared in Lawfare. In April, an artificial...
Massive Vietnam-Linked APIS Database Exposes Passport and Flight Data
Massive Vietnam-Linked APIS Database Exposes Passport and Flight Data Pierluigi Paganini September 08, 2026 An exposed Vietnam-linked APIS database contained...
North Korea-linked Hackers Hide a Backdoor Inside HAProxy
North Korea-linked Hackers Hide a Backdoor Inside HAProxy Pierluigi Paganini September 08, 2026 North Korea-linked hackers hid a backdoor inside...
IT Help Desk Impersonation Lets Hackers Bypass MFA
IT Help Desk Impersonation Lets Hackers Bypass MFA Pierluigi Paganini September 08, 2026 Attackers bypass endpoint security by posing as...
Stealing AI Reasoning Traces
Stealing AI Reasoning Traces Interesting research: “Stealing Reasoning Traces from Proprietary LLM APIs“: Abstract: Leading large language model providers now...
Condé Nast Data of 32.8 Million Users Offered for Sale After WIRED Leak
Condé Nast Data of 32.8 Million Users Offered for Sale After WIRED Leak Pierluigi Paganini September 07, 2026 Condé Nast...
