UAT-10027 campaign hits U.S. education and healthcare with stealthy Dohdoor backdoor
UAT-10027 campaign hits U.S. education and healthcare with stealthy Dohdoor backdoor Pierluigi Paganini February 26, 2026 UAT-10027 campaign is targeting...
Malware
Google GTIG disrupted China-linked APT UNC2814 halting attacks on 53 orgs in 42 countries
Google GTIG disrupted China-linked APT UNC2814 halting attacks on 53 orgs in 42 countries Pierluigi Paganini February 26, 2026 Google...
ShinyHunters cyberattack on CarGurus impacts 12.4 Million users
ShinyHunters cyberattack on CarGurus impacts 12.4 Million users Pierluigi Paganini February 25, 2026 ShinyHunters leaked data from 12.4M CarGurus accounts,...
Lazarus APT group deployed Medusa Ransomware against Middle East target
Lazarus APT group deployed Medusa Ransomware against Middle East target Pierluigi Paganini February 25, 2026 North Korea’s Lazarus Group used...
IBM X-Force Report Surfaces Increased Exploitation of Public-Facing Apps
An analysis of cybersecurity attacks published today by the X-Force arm of IBM finds there was a 44% increase...
Arkanix Stealer: AI-assisted info-stealer shuts down after brief campaign
Arkanix Stealer: AI-assisted info-stealer shuts down after brief campaign Pierluigi Paganini February 24, 2026 Arkanix Stealer surfaced in late 2025...
Everest ransomware hits Vikor Scientific ‘s supplier, data of 140,000 patients stolen
Everest ransomware hits Vikor Scientific ‘s supplier, data of 140,000 patients stolen Pierluigi Paganini February 24, 2026 Everest ransomware claims...
Wormable XMRig campaign leverages BYOVD and timed kill switch for stealth
Wormable XMRig campaign leverages BYOVD and timed kill switch for stealth Pierluigi Paganini February 23, 2026 A wormable cryptojacking campaign...
CVE-2026-1731 fuels ongoing attacks on BeyondTrust remote access products
CVE-2026-1731 fuels ongoing attacks on BeyondTrust remote access products Pierluigi Paganini February 23, 2026 Attackers are exploiting CVE-2026-1731 in BeyondTrust...
Security Affairs newsletter Round 564 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 564 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini February 22, 2026 A new round of...
FBI warns of surge in ATM Jackpotting, $20 Million lost in 2025
FBI warns of surge in ATM Jackpotting, $20 Million lost in 2025 Pierluigi Paganini February 20, 2026 The FBI warns...
PromptSpy abuses Gemini AI to gain persistent access on Android
PromptSpy abuses Gemini AI to gain persistent access on Android Pierluigi Paganini February 20, 2026 PromptSpy is the first Android...
PromptSpy ushers in the era of Android threats using GenAI
ESET researchers uncovered the first known case of Android malware abusing generative AI for context-aware user interface manipulation. While machine...
Germany’s national rail operator Deutsche Bahn hit by a DDoS attack
Germany’s national rail operator Deutsche Bahn hit by a DDoS attack Pierluigi Paganini February 19, 2026 Germany’s national rail operator,...
PromptSpy Android Malware Abuses Gemini AI to Automate Recent-Apps Persistence
Cybersecurity researchers have discovered what they say is the first Android malware that abuses Gemini, Google's generative artificial intelligence (AI)...
