MongoBleed (CVE-2025-14847): the US, China, and the EU are among the top exploited GEOs
MongoBleed (CVE-2025-14847): the US, China, and the EU are among the top exploited GEOs Pierluigi Paganini December 31, 2025 MongoBleed...
Paganini
Mustang Panda deploys ToneShell via signed kernel-mode rootkit driver
Mustang Panda deploys ToneShell via signed kernel-mode rootkit driver Pierluigi Paganini December 30, 2025 China-linked APT Mustang Panda used a...
Romania’s Oltenia Energy Complex suffers major ransomware attack
Romania’s Oltenia Energy Complex suffers major ransomware attack Pierluigi Paganini December 29, 2025 A ransomware attack hit Romania’s Oltenia Energy...
MongoBleed flaw actively exploited in attacks in the wild
MongoBleed flaw actively exploited in attacks in the wild Pierluigi Paganini December 29, 2025 A recently disclosed MongoDB flaw (MongoBleed)...
Stolen LastPass backups enable crypto theft through 2025
Stolen LastPass backups enable crypto theft through 2025 Pierluigi Paganini December 28, 2025 Stolen vault backups from the 2022 LastPass...
LangChain core vulnerability allows prompt injection and data exposure
LangChain core vulnerability allows prompt injection and data exposure Pierluigi Paganini December 27, 2025 A critical flaw in LangChain Core...
NPM package with 56,000 downloads compromises WhatsApp accounts
NPM package with 56,000 downloads compromises WhatsApp accounts Pierluigi Paganini December 27, 2025 An NPM package with over 56,000 downloads...
Pro-Russian group Noname057 claims cyberattack on La Poste services
Pro-Russian group Noname057 claims cyberattack on La Poste services Pierluigi Paganini December 26, 2025 Pro-Russian hacking group Noname057 claimed responsibility...
Spotify cracks down on unlawful scraping of 86 million songs
Spotify cracks down on unlawful scraping of 86 million songs Pierluigi Paganini December 26, 2025 Spotify shut down accounts after...
Five-year-old Fortinet FortiOS SSL VPN vulnerability actively exploited
Five-year-old Fortinet FortiOS SSL VPN vulnerability actively exploited Pierluigi Paganini December 25, 2025 Fortinet reported active exploitation of a five-year-old...
High-severity MongoDB flaw CVE-2025-14847 could lead to server takeover
High-severity MongoDB flaw CVE-2025-14847 could lead to server takeover Pierluigi Paganini December 25, 2025 MongoDB addressed a high-severity vulnerability that...
FBI seized ‘web3adspanels.org’ hosting stolen logins
FBI seized ‘web3adspanels.org’ hosting stolen logins Pierluigi Paganini December 24, 2025 The U.S. seized the ‘web3adspanels.org’ domain and database used...
Italian regulator rules Apple’s ATT feature limits competition
Italian regulator rules Apple’s ATT feature limits competition Pierluigi Paganini December 24, 2025 Italy fined Apple €98.6 million, ruling its...
Red Hat GitLab breach exposes data of 21,000 Nissan customers
Red Hat GitLab breach exposes data of 21,000 Nissan customers Pierluigi Paganini December 23, 2025 Hackers breached Red Hat’s GitLab,...
Critical n8n flaw could enable arbitrary code execution
Critical n8n flaw could enable arbitrary code execution Pierluigi Paganini December 23, 2025 A critical flaw in the n8n automation...
