Brevo Supply-Chain Attack Infected Over 100,000 Websites
Brevo Supply-Chain Attack Infected Over 100,000 Websites Pierluigi Paganini September 18, 2026 A Brevo supply-chain attack used compromised Cloudflare access...
Security Blogs
Category Added in a WPeMatico Campaign
Friday Squid Blogging: On Squid Egg Sacs
Friday Squid Blogging: On Squid Egg Sacs Short essay about squid egg sacs. As usual, you can also use this...
Gyazo Data Breach Exposes 23 Million User Records
Gyazo Data Breach Exposes 23 Million User Records Pierluigi Paganini September 18, 2026 A Gyazo breach exposed 23 million user...
RatHat Turns Android Accessibility Into an Attack Weapon
RatHat Turns Android Accessibility Into an Attack Weapon Pierluigi Paganini September 18, 2026 RatHat combines AI-driven screen control, Android debugging...
Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution
Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution Pierluigi Paganini September 18, 2026 Check Point fixed CVE-2026-91843, a critical...
Are AIs Still Struggling with CAPTCHAs?
Are AIs Still Struggling with CAPTCHAs? Anthropic’s recent security-incident document contains a bit about how CAPTCHAs are still frustrating Claude....
OpenAI admits its models lie to cover their own mistakes
OpenAI admits its models lie to cover their own mistakes Pierluigi Paganini September 17, 2026 OpenAI launches a formal framework...
Cyberattacks on Oil Tankers Put Maritime Critical Infrastructure at Risk
Cyberattacks on Oil Tankers Put Maritime Critical Infrastructure at Risk Pierluigi Paganini September 17, 2026 Cyberattacks on oil tankers show...
SilkParasite Infrastructure Links SpiceRAT to Central Asian Targets
SilkParasite Infrastructure Links SpiceRAT to Central Asian Targets Pierluigi Paganini September 17, 2026 Hunt.io links SpiceRAT, NodeEdgeRAT and NomadRAT to...
NightmareStresser Goes Offline in Global DDoS-for-Hire Crackdown
NightmareStresser Goes Offline in Global DDoS-for-Hire Crackdown Pierluigi Paganini September 17, 2026 The DOJ seized domains behind NightmareStresser, a DDoS-for-hire...
US Coast Guard and FBI board oil tanker to investigate cyber attack
An oil tanker bound for Texas was boarded mid-voyage by the US Coast Guard and FBI last month, after its...
U.S. CISA adds Acronis Backup, Cisco ISE, and Google Pixel flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Acronis Backup, Cisco ISE, and Google Pixel flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini September 17, 2026...
Chosen Brick, Iran’s Surveillance Malware
Chosen Brick, Iran’s Surveillance Malware Pierluigi Paganini September 17, 2026 UK, US, and Dutch agencies expose Chosen Brick, Iranian malware...
How Candidates Could Use AI for Good
How Candidates Could Use AI for Good This essay was written with Nathan E. Sanders, and originally appeared in The...
Smashing Security podcast #485: These researchers got drunk to hack an LG TV
Researchers wanted to test if LG’s smart TVs come with any security risks – but their lawyers noticed a snag:...
