Brevo Supply-Chain Attack Infected Over 100,000 Websites
Brevo Supply-Chain Attack Infected Over 100,000 Websites Pierluigi Paganini September 18, 2026 A Brevo supply-chain attack used compromised Cloudflare access...
Malware
RatHat Turns Android Accessibility Into an Attack Weapon
RatHat Turns Android Accessibility Into an Attack Weapon Pierluigi Paganini September 18, 2026 RatHat combines AI-driven screen control, Android debugging...
Chosen Brick, Iran’s Surveillance Malware
Chosen Brick, Iran’s Surveillance Malware Pierluigi Paganini September 17, 2026 UK, US, and Dutch agencies expose Chosen Brick, Iranian malware...
Smashing Security podcast #485: These researchers got drunk to hack an LG TV
Researchers wanted to test if LG’s smart TVs come with any security risks – but their lawyers noticed a snag:...
BambooToken: The Malware That Speaks MQTT to Stay Under the Radar
BambooToken: The Malware That Speaks MQTT to Stay Under the Radar Pierluigi Paganini September 16, 2026 Lumen exposes BambooToken, a...
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 114
This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies...
Security Affairs newsletter Round 594 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 594 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini September 13, 2026 A new round of...
Conti Hacker Who Built Malware and Attacked Victims Gets Four-Year Sentence
Conti Hacker Who Built Malware and Attacked Victims Gets Four-Year Sentence Pierluigi Paganini September 13, 2026 Ukrainian lawyer and Conti...
Attackers Exploit Critical Cisco FMC Flaw to deploy Qilin ransomware
Attackers Exploit Critical Cisco FMC Flaw to deploy Qilin ransomware Pierluigi Paganini September 11, 2026 Three threat groups are exploiting...
Smashing Security podcast #484: How websites are tracking you with silence
When a chap called Matt noticed his Bluetooth headphones wouldn’t switch to his phone, he was surprised to realise the...
PoisonedRefresh: A Fileless Linux Rootkit That Injects PHP Web Shells Into F5 BIG-IP APM Server Memory
PoisonedRefresh: A Fileless Linux Rootkit That Injects PHP Web Shells Into F5 BIG-IP APM Server Memory Pierluigi Paganini September 09,...
CRPx0 ransomware: what you need to know
CRPx0 is a cybercrime operation that started off operating a scam before pivoting into a fully-blown ransomware and cryptocurrency business....
North Korea-linked Hackers Hide a Backdoor Inside HAProxy
North Korea-linked Hackers Hide a Backdoor Inside HAProxy Pierluigi Paganini September 08, 2026 North Korea-linked hackers hid a backdoor inside...
StyleSmuggler: The Magento Zero-Day Behind New Store Attacks
StyleSmuggler: The Magento Zero-Day Behind New Store Attacks Pierluigi Paganini September 07, 2026 StyleSmuggler Magento zero-day is under active attack,...
JSCeal Hides Crypto Malware in V8 Bytecode
JSCeal Hides Crypto Malware in V8 Bytecode Pierluigi Paganini September 07, 2026 JSCeal hides crypto-stealing malware in V8 bytecode, but...
