AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS
AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS Pierluigi Paganini September 24, 2026 MikroTrick chains two RouterOS flaws to...
Security Blogs
Category Added in a WPeMatico Campaign
Ukrainian ransomware developer jailed for nearly 13 years
A court in Zurich has sentenced a Ukrainian man to 12 years and nine months in prison, and banned him...
OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research
OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research Pierluigi Paganini September 24, 2026 OpenAI’s AI agent bypassed...
CLOSEDQUORUM, the malware that asks four AI models what to do next
CLOSEDQUORUM, the malware that asks four AI models what to do next Pierluigi Paganini September 24, 2026 Cisco Talos finds...
Malicious npm Packages That Evade Defenses
Malicious npm Packages That Evade Defenses This is an impressive piece of malware. Its sophistication says nation-state to me, but...
U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini...
F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks
F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks Pierluigi Paganini September 23, 2026 F5 warns of a critical BIG-IP...
Smashing Security podcast #486: Vibe-coded shops, and hackable Flock cameras
A store in Auckland vibe-coded itself a new website. Within hours, its inventory had somehow expanded to include a pair...
ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack
ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack Pierluigi Paganini September 23, 2026 ShinyHunters claims FBI breach via PeopleSoft...
EvilTokens made phishing-as-a-service look easy. Then it got taken down
EvilTokens made phishing-as-a-service look easy. Then it got taken down Pierluigi Paganini September 23, 2026 Microsoft, Coinbase and law enforcement...
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools Pierluigi Paganini September 23, 2026 Attackers spoofed...
CVE-2026-87902: how close is your WordPress to remote code execution?
CVE-2026-87902: how close is your WordPress to remote code execution? Pierluigi Paganini September 23, 2026 WordPress 7.1.2 fixes an unauthenticated...
Research on Models Engaging in Genie-Like Behavior
Research on Models Engaging in Genie-Like Behavior New paper: “Self-Jailbreaking: Language Models Can Reason Themselves Out of Safety Alignment After...
Weekly Update 522: Live From Oslo with Scott Helme
23 September 2026 Heads up: the first 7 mins is a bit quiet until we worked out the external mic...
Check Point Fixes a New Actively Exploited Critical Security Flaw
Check Point Fixes a New Actively Exploited Critical Security Flaw Pierluigi Paganini September 22, 2026 Check Point fixes an actively...
