ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer
ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer Pierluigi Paganini September 25, 2026 Attackers hijacked Ukrainian websites to deliver...
Security Blogs
Category Added in a WPeMatico Campaign
AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway
AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway Pierluigi Paganini September 25, 2026 CARBONATO exploits exposed Docker...
U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini September 25, 2026 U.S. Cybersecurity and...
On Anthropic’s AI Misuse Report
On Anthropic’s AI Misuse Report Earlier this month, Anthropic published a long report detailing all of the Claude misuses it...
Ryuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison
Ryuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison Pierluigi Paganini September 24, 2026 Ryuk member Karen Vardanyan...
AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS
AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS Pierluigi Paganini September 24, 2026 MikroTrick chains two RouterOS flaws to...
Ukrainian ransomware developer jailed for nearly 13 years
A court in Zurich has sentenced a Ukrainian man to 12 years and nine months in prison, and banned him...
OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research
OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research Pierluigi Paganini September 24, 2026 OpenAI’s AI agent bypassed...
CLOSEDQUORUM, the malware that asks four AI models what to do next
CLOSEDQUORUM, the malware that asks four AI models what to do next Pierluigi Paganini September 24, 2026 Cisco Talos finds...
Malicious npm Packages That Evade Defenses
Malicious npm Packages That Evade Defenses This is an impressive piece of malware. Its sophistication says nation-state to me, but...
U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini...
F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks
F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks Pierluigi Paganini September 23, 2026 F5 warns of a critical BIG-IP...
Smashing Security podcast #486: Vibe-coded shops, and hackable Flock cameras
A store in Auckland vibe-coded itself a new website. Within hours, its inventory had somehow expanded to include a pair...
ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack
ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack Pierluigi Paganini September 23, 2026 ShinyHunters claims FBI breach via PeopleSoft...
EvilTokens made phishing-as-a-service look easy. Then it got taken down
EvilTokens made phishing-as-a-service look easy. Then it got taken down Pierluigi Paganini September 23, 2026 Microsoft, Coinbase and law enforcement...
