Nation-state and criminal actors leverage WinRAR flaw in attacks
Nation-state and criminal actors leverage WinRAR flaw in attacks Pierluigi Paganini January 29, 2026 Multiple threat actors exploited a now-patched...
hacking news
OpenSSL issued security updates to fix 12 flaws, including Remote Code Execution
OpenSSL issued security updates to fix 12 flaws, including Remote Code Execution Pierluigi Paganini January 29, 2026 OpenSSL released security...
U.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalog Pierluigi Paganini January 28, 2026...
Fortinet patches actively exploited FortiOS SSO auth bypass (CVE-2026-24858)
Fortinet patches actively exploited FortiOS SSO auth bypass (CVE-2026-24858) Pierluigi Paganini January 28, 2026 Fortinet released fixes for a critical...
PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun
PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun Pierluigi Paganini January 28, 2026 Koi researchers found...
Shadowserver finds 6,000+ likely vulnerable SmarterMail servers exposed online
Shadowserver finds 6,000+ likely vulnerable SmarterMail servers exposed online Pierluigi Paganini January 27, 2026 Shadowserver researchers found 6,000+ SmarterMail servers...
Amnesia RAT deployed in multi-stage phishing attacks against Russian users
Amnesia RAT deployed in multi-stage phishing attacks against Russian users Pierluigi Paganini January 27, 2026 A multi-stage phishing campaign targets...
Dormakaba flaws allow to access major organizations’ doors
Dormakaba flaws allow to access major organizations’ doors Pierluigi Paganini January 27, 2026 Researchers found over 20 flaws in Dormakaba...
Emergency Microsoft update fixes in-the-wild Office zero-day
Emergency Microsoft update fixes in-the-wild Office zero-day Pierluigi Paganini January 26, 2026 Microsoft issued emergency updates to fix an actively...
ShinyHunters claims 2 Million Crunchbase records; company confirms breach
ShinyHunters claims 2 Million Crunchbase records; company confirms breach Pierluigi Paganini January 26, 2026 Crunchbase confirms a data breach after...
Energy sector targeted in multi-stage phishing and BEC campaign using SharePoint
Energy sector targeted in multi-stage phishing and BEC campaign using SharePoint Pierluigi Paganini January 26, 2026 Microsoft warns of a...
North Korea–linked KONNI uses AI to build stealthy malware tooling
North Korea–linked KONNI uses AI to build stealthy malware tooling Pierluigi Paganini January 26, 2026 Check Point links an active...
Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power grid
Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power grid Pierluigi Paganini January 26, 2026 Russia-linked APT Sandworm...
Nike is investigating a possible data breach, after WorldLeaks claims
Nike is investigating a possible data breach, after WorldLeaks claims Pierluigi Paganini January 25, 2026 Nike is investigating a possible...
Osiris ransomware emerges, leveraging BYOVD technique to kill security tools
Osiris ransomware emerges, leveraging BYOVD technique to kill security tools Pierluigi Paganini January 24, 2026 Researchers identified a new Osiris...
