U.S. CISA adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 21, 2026 U.S. Cybersecurity and...
hacking
Cl0p Targets 40+ Organizations Through PTC Windchill Flaw
Cl0p Targets 40+ Organizations Through PTC Windchill Flaw Pierluigi Paganini August 21, 2026 Cl0p claims over 40 organizations fell victim...
Manic: The Android Malware That Exfiltrates Data Even When the Phone Is Offline
Manic: The Android Malware That Exfiltrates Data Even When the Phone Is Offline Pierluigi Paganini August 20, 2026 Manic Android...
NSA, CISA, FBI, DOE, and EPA Warn of Active AI-Assisted Attacks on Siemens S7 PLCs
NSA, CISA, FBI, DOE, and EPA Warn of Active AI-Assisted Attacks on Siemens S7 PLCs Pierluigi Paganini August 20, 2026...
U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 20, 2026 U.S. Cybersecurity and...
US Indicts 17 Iranians Over Years-Long Cyber Espionage Campaign
US Indicts 17 Iranians Over Years-Long Cyber Espionage Campaign Pierluigi Paganini August 20, 2026 The US charged 17 Iranians over...
StopAndProtect Turns 2,000 Hacked WordPress Sites Into a Criminal Network
StopAndProtect Turns 2,000 Hacked WordPress Sites Into a Criminal Network Pierluigi Paganini August 20, 2026 StopAndProtect turned nearly 2,000 hacked...
Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras
Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras Pierluigi Paganini August 19, 2026 An exposed operator directory...
Microsoft Tracks MacSync Stealer by Its Behavior, Not Its Domains
Microsoft Tracks MacSync Stealer by Its Behavior, Not Its Domains Pierluigi Paganini August 19, 2026 Microsoft tracked over 30 MacSync...
Hacking Public Wi-Fi DNS to Steal Credentials
Hacking Public Wi-Fi DNS to Steal Credentials Criminals are hacking into public Wi-Fi devices—at hotels, conference centers, and so on—around...
Vulnerabilities in Car Anti-Theft Device
Vulnerabilities in Car Anti-Theft Device This is disturbing: …a team of security researchers at UC San Diego, who found that...
The OpenAI Hack Shows the Genie Is Out of the Bottle
The OpenAI Hack Shows the Genie Is Out of the Bottle This essay originally appeared in Foreign Policy. Earlier this...
Measuring the Tendency of AI Agents to Go Rogue
Measuring the Tendency of AI Agents to Go Rogue This essay was written with Barath Raghavan, and originally appeared in...
Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays
Ravie LakshmananJul 28, 2026Malware / Cyber Espionage The Iranian state-backed hacking group tracked as Nimbus Manticore (aka GalaxyGato, Mirage Kitten,...
Vulnerability in FIFA’s Network
About Bruce SchneierI am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about...