WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign
WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign Pierluigi Paganini September 30, 2026 Mandiant and GTIG detail...
Security Blogs
Category Added in a WPeMatico Campaign
Pentagon personnel database breach exposes personal data of millions
The US Department of Defense has confirmed a breach at one of its main repositories of personnel information, the Defense...
I Want Better Reporting on AI Genie Behavior
I Want Better Reporting on AI Genie Behavior AI systems are regularly completing tasks in ways that their prompters don’t...
Japanese railway operators Keio Corporation and Tokyo Metro disclose security breaches
Japanese railway operators Keio Corporation and Tokyo Metro disclose security breaches Pierluigi Paganini September 29, 2026 Keio, a major Japanese...
Three Million Affected in Pentagon Personnel Agency Data Breach
Three Million Affected in Pentagon Personnel Agency Data Breach Pierluigi Paganini September 29, 2026 Pentagon personnel agency breach exposed data...
Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks
Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks Pierluigi Paganini September 29, 2026 Apple patched zero-day CVE-2026-86950 in CoreGraphics,...
24-Year-Old Arrested in Dutch Investigation Into ShinyHunters
24-Year-Old Arrested in Dutch Investigation Into ShinyHunters Pierluigi Paganini September 29, 2026 Dutch police confirm the arrest of a 24-year-old...
GPT-6 Astra and the Supply Chain Attack It Wasn’t Asked to Launch
GPT-6 Astra and the Supply Chain Attack It Wasn’t Asked to Launch Pierluigi Paganini September 29, 2026 UK AISI finds...
Using Device Linking to Eavesdrop on WhatsApp and Signal
Using Device Linking to Eavesdrop on WhatsApp and Signal Modern messaging apps allow users to link their phone accounts to...
AI Accounts Are Becoming the New Target for Infostealers
AI Accounts Are Becoming the New Target for Infostealers Pierluigi Paganini September 28, 2026 Infostealers are exposing corporate AI accounts,...
Nearly 400,000 Medicaid Beneficiaries Caught in Medicaid and DC Healthcare Alliance Data Exposure
Nearly 400,000 Medicaid Beneficiaries Caught in Medicaid and DC Healthcare Alliance Data Exposure Pierluigi Paganini September 28, 2026 Nearly 400,000...
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by...
Storm-3168, Linked to JADEPUFFER, Abused Stolen Azure Identities
Storm-3168, Linked to JADEPUFFER, Abused Stolen Azure Identities Pierluigi Paganini September 28, 2026 Microsoft details Storm-3168, the JADEPUFFER-linked actor that...
U.S. CISA adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini September 28, 2026 U.S. Cybersecurity and...
Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild
Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild Pierluigi Paganini September 28, 2026 Roundcube SQL injection CVE-2026-48842...
