React2Shell under attack: RondoDox Botnet spreads miners and malware
React2Shell under attack: RondoDox Botnet spreads miners and malware Pierluigi Paganini January 01, 2026 RondoDox botnet exploits the critical React2Shell...
Pierluigi
ESA disclosed a data breach, hackers breached external servers
ESA disclosed a data breach, hackers breached external servers Pierluigi Paganini December 31, 2025 ESA confirmed a data breach after...
Singapore CSA warns of maximun severity SmarterMail RCE flaw
Singapore CSA warns of maximun severity SmarterMail RCE flaw Pierluigi Paganini December 31, 2025 Singapore’s CSA warns of CVE-2025-52691, a...
MongoBleed (CVE-2025-14847): the US, China, and the EU are among the top exploited GEOs
MongoBleed (CVE-2025-14847): the US, China, and the EU are among the top exploited GEOs Pierluigi Paganini December 31, 2025 MongoBleed...
Coupang announces $1.17B compensation plan for 33.7M data breach victims
Coupang announces $1.17B compensation plan for 33.7M data breach victims Pierluigi Paganini December 30, 2025 Coupang will spend about $1.17B...
Mustang Panda deploys ToneShell via signed kernel-mode rootkit driver
Mustang Panda deploys ToneShell via signed kernel-mode rootkit driver Pierluigi Paganini December 30, 2025 China-linked APT Mustang Panda used a...
Lithuanian suspect arrested over KMSAuto malware that infected 2.8M systems
Lithuanian suspect arrested over KMSAuto malware that infected 2.8M systems Pierluigi Paganini December 30, 2025 A Lithuanian national was arrested...
Romania’s Oltenia Energy Complex suffers major ransomware attack
Romania’s Oltenia Energy Complex suffers major ransomware attack Pierluigi Paganini December 29, 2025 A ransomware attack hit Romania’s Oltenia Energy...
Korean Air discloses data breach after the hack of its catering and duty-free supplier
Korean Air discloses data breach after the hack of its catering and duty-free supplier Pierluigi Paganini December 29, 2025 Korean...
MongoBleed flaw actively exploited in attacks in the wild
MongoBleed flaw actively exploited in attacks in the wild Pierluigi Paganini December 29, 2025 A recently disclosed MongoDB flaw (MongoBleed)...
Evasive Panda cyberespionage campaign uses DNS poisoning to install MgBot backdoor
Evasive Panda cyberespionage campaign uses DNS poisoning to install MgBot backdoor Pierluigi Paganini December 29, 2025 China-linked APT Evasive Panda...
Stolen LastPass backups enable crypto theft through 2025
Stolen LastPass backups enable crypto theft through 2025 Pierluigi Paganini December 28, 2025 Stolen vault backups from the 2022 LastPass...
LangChain core vulnerability allows prompt injection and data exposure
LangChain core vulnerability allows prompt injection and data exposure Pierluigi Paganini December 27, 2025 A critical flaw in LangChain Core...
NPM package with 56,000 downloads compromises WhatsApp accounts
NPM package with 56,000 downloads compromises WhatsApp accounts Pierluigi Paganini December 27, 2025 An NPM package with over 56,000 downloads...
Pro-Russian group Noname057 claims cyberattack on La Poste services
Pro-Russian group Noname057 claims cyberattack on La Poste services Pierluigi Paganini December 26, 2025 Pro-Russian hacking group Noname057 claimed responsibility...
