CLOSEDQUORUM, the malware that asks four AI models what to do next
CLOSEDQUORUM, the malware that asks four AI models what to do next Pierluigi Paganini September 24, 2026 Cisco Talos finds...
Security Blogs
Category Added in a WPeMatico Campaign
Malicious npm Packages That Evade Defenses
Malicious npm Packages That Evade Defenses This is an impressive piece of malware. Its sophistication says nation-state to me, but...
U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini...
F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks
F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks Pierluigi Paganini September 23, 2026 F5 warns of a critical BIG-IP...
Smashing Security podcast #486: Vibe-coded shops, and hackable Flock cameras
A store in Auckland vibe-coded itself a new website. Within hours, its inventory had somehow expanded to include a pair...
ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack
ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack Pierluigi Paganini September 23, 2026 ShinyHunters claims FBI breach via PeopleSoft...
EvilTokens made phishing-as-a-service look easy. Then it got taken down
EvilTokens made phishing-as-a-service look easy. Then it got taken down Pierluigi Paganini September 23, 2026 Microsoft, Coinbase and law enforcement...
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools Pierluigi Paganini September 23, 2026 Attackers spoofed...
CVE-2026-87902: how close is your WordPress to remote code execution?
CVE-2026-87902: how close is your WordPress to remote code execution? Pierluigi Paganini September 23, 2026 WordPress 7.1.2 fixes an unauthenticated...
Research on Models Engaging in Genie-Like Behavior
Research on Models Engaging in Genie-Like Behavior New paper: “Self-Jailbreaking: Language Models Can Reason Themselves Out of Safety Alignment After...
Weekly Update 522: Live From Oslo with Scott Helme
23 September 2026 Heads up: the first 7 mins is a bit quiet until we worked out the external mic...
Check Point Fixes a New Actively Exploited Critical Security Flaw
Check Point Fixes a New Actively Exploited Critical Security Flaw Pierluigi Paganini September 22, 2026 Check Point fixes an actively...
Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day
Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day Pierluigi Paganini September 22, 2026 The researcher Chaotic Eclipse released...
Public PoC Exposes Critical Veeam Agent Privilege Escalation
Public PoC Exposes Critical Veeam Agent Privilege Escalation Pierluigi Paganini September 22, 2026 A Veeam Agent flaw lets local users...
U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini September 22, 2026 U.S. Cybersecurity and Infrastructure...
