AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway
AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway Pierluigi Paganini September 25, 2026 CARBONATO exploits exposed Docker...
Malware
Ryuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison
Ryuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison Pierluigi Paganini September 24, 2026 Ryuk member Karen Vardanyan...
Ukrainian ransomware developer jailed for nearly 13 years
A court in Zurich has sentenced a Ukrainian man to 12 years and nine months in prison, and banned him...
CLOSEDQUORUM, the malware that asks four AI models what to do next
CLOSEDQUORUM, the malware that asks four AI models what to do next Pierluigi Paganini September 24, 2026 Cisco Talos finds...
Malicious npm Packages That Evade Defenses
Malicious npm Packages That Evade Defenses This is an impressive piece of malware. Its sophistication says nation-state to me, but...
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools Pierluigi Paganini September 23, 2026 Attackers spoofed...
Contagious Interview: 30,000 devices infected by a fake job interview
Contagious Interview: 30,000 devices infected by a fake job interview Pierluigi Paganini September 22, 2026 North Korea-linked WaterPlum runs the...
ChainScript: the RAT that hides its command server inside a blockchain contract
ChainScript: the RAT that hides its command server inside a blockchain contract Pierluigi Paganini September 21, 2026 Blackpoint uncovers ChainScript,...
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 115
This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies...
Security Affairs newsletter Round 595 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 595 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini September 20, 2026 A new round of...
Brevo Supply-Chain Attack Infected Over 100,000 Websites
Brevo Supply-Chain Attack Infected Over 100,000 Websites Pierluigi Paganini September 18, 2026 A Brevo supply-chain attack used compromised Cloudflare access...
RatHat Turns Android Accessibility Into an Attack Weapon
RatHat Turns Android Accessibility Into an Attack Weapon Pierluigi Paganini September 18, 2026 RatHat combines AI-driven screen control, Android debugging...
Chosen Brick, Iran’s Surveillance Malware
Chosen Brick, Iran’s Surveillance Malware Pierluigi Paganini September 17, 2026 UK, US, and Dutch agencies expose Chosen Brick, Iranian malware...
Smashing Security podcast #485: These researchers got drunk to hack an LG TV
Researchers wanted to test if LG’s smart TVs come with any security risks – but their lawyers noticed a snag:...
BambooToken: The Malware That Speaks MQTT to Stay Under the Radar
BambooToken: The Malware That Speaks MQTT to Stay Under the Radar Pierluigi Paganini September 16, 2026 Lumen exposes BambooToken, a...
