BadAudio malware: how APT24 scaled its cyberespionage through supply chain attacks
BadAudio malware: how APT24 scaled its cyberespionage through supply chain attacks Pierluigi Paganini November 22, 2025 APT24 used supply chain...
information security news
U.S. CISA adds an Oracle Fusion Middleware flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds an Oracle Fusion Middleware flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini November 22, 2025 U.S. Cybersecurity...
Massive data leak hits Italian railway operator Ferrovie dello Stato via Almaviva hack
Massive data leak hits Italian railway operator Ferrovie dello Stato via Almaviva hack Pierluigi Paganini November 21, 2025 Ferrovie dello...
Salesforce alerts users to potential data exposure via Gainsight OAuth apps
Salesforce alerts users to potential data exposure via Gainsight OAuth apps Pierluigi Paganini November 21, 2025 Salesforce warns that unusual...
Researchers devised a new enumeration technique that exposed 3.5B WhatsApp profiles
Researchers devised a new enumeration technique that exposed 3.5B WhatsApp profiles Pierluigi Paganini November 20, 2025 Researchers disclosed a WhatsApp...
Sturnus: New Android banking trojan targets WhatsApp, Telegram, and Signal
Sturnus: New Android banking trojan targets WhatsApp, Telegram, and Signal Pierluigi Paganini November 20, 2025 The Android trojan Sturnus targets...
Cyber-enabled kinetic targeting: Iran-linked actor uses cyber operations to support physical attacks
Cyber-enabled kinetic targeting: Iran-linked actor uses cyber operations to support physical attacks Pierluigi Paganini November 20, 2025 Iran-linked actors mapped...
U.S. CISA adds a Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini November 19, 2025 U.S. Cybersecurity...
7-Zip RCE flaw (CVE-2025-11001) actively exploited in attacks in the wild
7-Zip RCE flaw (CVE-2025-11001) actively exploited in attacks in the wild Pierluigi Paganini November 19, 2025 A remote code execution...
Operation WrtHug hijacks 50,000+ ASUS routers to build a global botnet
Operation WrtHug hijacks 50,000+ ASUS routers to build a global botnet Pierluigi Paganini November 19, 2025 Operation WrtHug hijacks tens...
Operation WrtHug hijacks 50,000+ ASUS routers to Bìbuild global botnet
Operation WrtHug hijacks 50,000+ ASUS routers to Bìbuild global botnet Pierluigi Paganini November 19, 2025 Operation WrtHug hijacks tens of...
U.S. CISA adds a new Fortinet FortiWeb flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a new Fortinet FortiWeb flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini November 19, 2025 U.S. CISA...
Eurofiber confirms November 13 hack, data theft, and extortion attempt
Eurofiber confirms November 13 hack, data theft, and extortion attempt Pierluigi Paganini November 19, 2025 Eurofiber says hackers exploited a...
New FortiWeb zero-day CVE-2025-58034 under attack patched by Fortinet
New FortiWeb zero-day CVE-2025-58034 under attack patched by Fortinet Pierluigi Paganini November 19, 2025 Fortinet patched a new FortiWeb zero-day,...
Pennsylvania Office of the Attorney General (OAG) confirms data breach after August attack
Pennsylvania Office of the Attorney General (OAG) confirms data breach after August attack Pierluigi Paganini November 18, 2025 The Pennsylvania...
