Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools Pierluigi Paganini September 23, 2026 Attackers spoofed...
Security Blogs
Category Added in a WPeMatico Campaign
CVE-2026-87902: how close is your WordPress to remote code execution?
CVE-2026-87902: how close is your WordPress to remote code execution? Pierluigi Paganini September 23, 2026 WordPress 7.1.2 fixes an unauthenticated...
Research on Models Engaging in Genie-Like Behavior
Research on Models Engaging in Genie-Like Behavior New paper: “Self-Jailbreaking: Language Models Can Reason Themselves Out of Safety Alignment After...
Weekly Update 522: Live From Oslo with Scott Helme
23 September 2026 Heads up: the first 7 mins is a bit quiet until we worked out the external mic...
Check Point Fixes a New Actively Exploited Critical Security Flaw
Check Point Fixes a New Actively Exploited Critical Security Flaw Pierluigi Paganini September 22, 2026 Check Point fixes an actively...
Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day
Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day Pierluigi Paganini September 22, 2026 The researcher Chaotic Eclipse released...
Public PoC Exposes Critical Veeam Agent Privilege Escalation
Public PoC Exposes Critical Veeam Agent Privilege Escalation Pierluigi Paganini September 22, 2026 A Veeam Agent flaw lets local users...
U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini September 22, 2026 U.S. Cybersecurity and Infrastructure...
Contagious Interview: 30,000 devices infected by a fake job interview
Contagious Interview: 30,000 devices infected by a fake job interview Pierluigi Paganini September 22, 2026 North Korea-linked WaterPlum runs the...
GPT-6 Astra Breaks an Old Enigma Message
GPT-6 Astra Breaks an Old Enigma Message This is pretty amazing: However, the most astonishing thing about this break is...
Google Fined €403 Million Over Location Data Practices
Google Fined €403 Million Over Location Data Practices Pierluigi Paganini September 21, 2026 Ireland’s DPC fined Google €403 million over...
Foreign Hackers Target Two Colorado Water Utilities
Foreign Hackers Target Two Colorado Water Utilities Pierluigi Paganini September 21, 2026 Hackers targeted two Colorado water utilities, changing OT...
ChainScript: the RAT that hides its command server inside a blockchain contract
ChainScript: the RAT that hides its command server inside a blockchain contract Pierluigi Paganini September 21, 2026 Blackpoint uncovers ChainScript,...
Reverse-Engineering Flock Cameras
Reverse-Engineering Flock Cameras Hackers captured a Flock camera and got a look (alternate link) at the software: While much of...
Taking the Cyber Drill to the World Stage: My Session at The World CIO 200 Summit Grand Finale, Sri Lanka
Published: 21 September 2026 Most incident response plans fail on paper before they fail in production. Nobody reads them until...
