AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway
AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway Pierluigi Paganini September 25, 2026 CARBONATO exploits exposed Docker...
hacking news
U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini September 25, 2026 U.S. Cybersecurity and...
Ryuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison
Ryuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison Pierluigi Paganini September 24, 2026 Ryuk member Karen Vardanyan...
AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS
AI Helps Uncover MikroTrick Attack Chain in MikroTik RouterOS Pierluigi Paganini September 24, 2026 MikroTrick chains two RouterOS flaws to...
OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research
OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research Pierluigi Paganini September 24, 2026 OpenAI’s AI agent bypassed...
CLOSEDQUORUM, the malware that asks four AI models what to do next
CLOSEDQUORUM, the malware that asks four AI models what to do next Pierluigi Paganini September 24, 2026 Cisco Talos finds...
U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini...
F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks
F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks Pierluigi Paganini September 23, 2026 F5 warns of a critical BIG-IP...
ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack
ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack Pierluigi Paganini September 23, 2026 ShinyHunters claims FBI breach via PeopleSoft...
EvilTokens made phishing-as-a-service look easy. Then it got taken down
EvilTokens made phishing-as-a-service look easy. Then it got taken down Pierluigi Paganini September 23, 2026 Microsoft, Coinbase and law enforcement...
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools Pierluigi Paganini September 23, 2026 Attackers spoofed...
CVE-2026-87902: how close is your WordPress to remote code execution?
CVE-2026-87902: how close is your WordPress to remote code execution? Pierluigi Paganini September 23, 2026 WordPress 7.1.2 fixes an unauthenticated...
Check Point Fixes a New Actively Exploited Critical Security Flaw
Check Point Fixes a New Actively Exploited Critical Security Flaw Pierluigi Paganini September 22, 2026 Check Point fixes an actively...
Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day
Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day Pierluigi Paganini September 22, 2026 The researcher Chaotic Eclipse released...
Public PoC Exposes Critical Veeam Agent Privilege Escalation
Public PoC Exposes Critical Veeam Agent Privilege Escalation Pierluigi Paganini September 22, 2026 A Veeam Agent flaw lets local users...
