MUST READ

FBI launches inquiry into Steam games spreading malware

 | 

Former Germany’s foreign intelligence VP hit in Signal account takeover campaign

 | 

Advanced Protection Mode in Android 17 prevents apps from misusing Accessibility Services

 | 

Unprivileged users could exploit AppArmor bugs to gain root access

 | 

Payload Ransomware claims the hack of Royal Bahrain Hospital

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 88

 | 

Security Affairs newsletter Round 567 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

Starbucks data breach impacts 889 employees

 | 

Storm-2561 lures victims to spoofed VPN sites to harvest corporate logins

 | 

Interpol - Operation Synergia III leads to 45,000 malicious IPs dismantled and 94 arrests worldwide

 | 

U.S. CISA adds Google Chrome flaws to its Known Exploited Vulnerabilities catalog

 | 

Hackers targeted Poland’s National Centre for Nuclear Research

 | 

US and European authorities disrupt socksEscort proxy service tied to AVrecon botnet

 | 

AI-assisted Slopoly malware powers Hive0163’s ransomware campaigns

 | 

Google fixed two new actively exploited flaws in the Chrome browser

 | 

Beyond File Servers: Securing Unstructured Data in the Era of AI

 | 

Apple issues emergency fixes for Coruna flaws in older iOS versions

 | 

Critical SQL Injection bug in Ally plugin threatens 400,000+ WordPress sites

 | 

ENISA Technical Advisory on Secure Package Managers: Essential DevSecOps Guidance

 | 

U.S. CISA adds a flaw in n8n to its Known Exploited Vulnerabilities catalog

 | 

LATEST NEWS

VIEW ALL
Cyber Crime
FBI launches inquiry into Steam games spreading malware
Pierluigi Paganini March 16, 2026

The FBI is asking gamers who installed malware-infected Steam games between May 2024 and January 2026 to come forward as part of an ongoing investigation. The FBI is seeking gamers who downloaded ...

Intelligence
Former Germany’s foreign intelligence VP hit in Signal account takeover campaign
Pierluigi Paganini March 16, 2026

Former BND VP Arndt Freytag von Loringhoven was targeted in a Signal cyberattack, part of a wave hitting officials and politicians in Germany. A cyberattack targeting Signal and WhatsApp users has ...

Security
Advanced Protection Mode in Android 17 prevents apps from misusing Accessibility Services
Pierluigi Paganini March 16, 2026

Android 17 will block non-accessibility apps from using the Accessibility API under Advanced Protection Mode to reduce malware abuse. Android 17 introduces a new security feature in Advanced Prote ...

Hacking
Unprivileged users could exploit AppArmor bugs to gain root access
Pierluigi Paganini March 16, 2026

Researchers found nine “CrackArmor” flaws in Linux AppArmor that could let unprivileged users bypass protections, gain root privileges, and weaken container isolation. Qualys researchers discl ...

top articles

Massive GitHub malware operation spreads BoryptGrab stealer
March 08, 2026
Threat actors use custom AuraInspector to harvest data from Salesforce systems
March 10, 2026
Starbucks data breach impacts 889 employees
March 14, 2026
Google fixed two new actively exploited flaws in the Chrome browser
March 13, 2026
Apple issues emergency fixes for Coruna flaws in older iOS versions
March 12, 2026

newsletter

Subscribe to my email list and stay
up-to-date!

most popular

VIEW ALL
Cyber Crime

FBI launches inquiry into Steam games spreading malware

March 16, 2026

Intelligence
Former Germany’s foreign intelligence VP hit in Signal account takeover campaign

March 16, 2026

Security
Advanced Protection Mode in Android 17 prevents apps from misusing Accessibility Services

March 16, 2026

Hacking
Unprivileged users could exploit AppArmor bugs to gain root access

March 16, 2026

Cyber Crime
Payload Ransomware claims the hack of Royal Bahrain Hospital

March 15, 2026

recent articles

Cyber Crime
FBI launches inquiry into Steam games spreading malware

The FBI is asking gamers who installed malware-infected Steam games between May 2024 and January 2026 to come forward as part of an ongoing investigation. The FBI is seeking gamers who downloaded ...

Pierluigi Paganini March 16, 2026
Intelligence
Former Germany’s foreign intelligence VP hit in Signal account takeover campaign

Former BND VP Arndt Freytag von Loringhoven was targeted in a Signal cyberattack, part of a wave hitting officials and politicians in Germany. A cyberattack targeting Signal and WhatsApp users has ...

Pierluigi Paganini March 16, 2026
Security
Advanced Protection Mode in Android 17 prevents apps from misusing Accessibility Services

Android 17 will block non-accessibility apps from using the Accessibility API under Advanced Protection Mode to reduce malware abuse. Android 17 introduces a new security feature in Advanced Prote ...

Pierluigi Paganini March 16, 2026
Hacking
Unprivileged users could exploit AppArmor bugs to gain root access

Researchers found nine “CrackArmor” flaws in Linux AppArmor that could let unprivileged users bypass protections, gain root privileges, and weaken container isolation. Qualys researchers discl ...

Pierluigi Paganini March 16, 2026
Cyber Crime
Payload Ransomware claims the hack of Royal Bahrain Hospital

The Payload Ransomware group claims to have breached the Royal Bahrain Hospital (RBH), a leading healthcare facility in Bahrain. The Payload Ransomware group claims to have hacked the Royal Bahrai ...

Pierluigi Paganini March 15, 2026
Breaking News
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 88

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter New BoryptGrab Stealer Targets Windows U ...

Pierluigi Paganini March 15, 2026
Breaking News
Security Affairs newsletter Round 567 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly Security ...

Pierluigi Paganini March 15, 2026
Security
Starbucks data breach impacts 889 employees

Starbucks disclosed a breach after phishing attacks on its employee portal led to unauthorized access to Partner Central accounts, exposing staff data. Starbucks reported a data breach affecting h ...

Pierluigi Paganini March 14, 2026
Cyber Crime
Storm-2561 lures victims to spoofed VPN sites to harvest corporate logins

Attackers linked to Storm-2561 use SEO-poisoned search results to lure users to fake Ivanti, Cisco, and Fortinet VPN sites that steal corporate login credentials. In mid-January 2026, Microsoft De ...

Pierluigi Paganini March 14, 2026
Cyber Crime
Interpol - Operation Synergia III leads to 45,000 malicious IPs dismantled and 94 arrests worldwide

INTERPOL dismantled 45,000 malicious IPs and servers and arrested 94 suspects in a global cybercrime operation. INTERPOL announced a global cybercrime operation (codenamed Operation Synergia III) ...

Pierluigi Paganini March 14, 2026
Security
U.S. CISA adds Google Chrome flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Chrome flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CIS ...

Pierluigi Paganini March 13, 2026
Security
Hackers targeted Poland’s National Centre for Nuclear Research

Hackers targeted Poland’s National Centre for Nuclear Research, but security systems detected and blocked the attack before any damage. The National Centre for Nuclear Research in Poland reporte ...

Pierluigi Paganini March 13, 2026
Security
US and European authorities disrupt socksEscort proxy service tied to AVrecon botnet

Authorities in the US and Europe disrupted the SocksEscort proxy service, which used the AVrecon botnet and infected about 360,000 devices since 2020. Law enforcement agencies in the US and Europe ...

Pierluigi Paganini March 13, 2026
Malware
AI-assisted Slopoly malware powers Hive0163’s ransomware campaigns

The Hive0163 group used AI-assisted malware called Slopoly to maintain persistent access in ransomware attacks. IBM X-Force researchers report that the financially motivated group Hive0163 is usin ...

Pierluigi Paganini March 13, 2026
Hacking
Google fixed two new actively exploited flaws in the Chrome browser

Google addressed two high-severity vulnerabilities in the Chrome browser that have been exploited in attacks in the wild. Google has released security updates to address two high-severity vulnerab ...

Pierluigi Paganini March 13, 2026
Security
Beyond File Servers: Securing Unstructured Data in the Era of AI

File servers still exist for legacy storage and governance, but most modern workflows now happen in collaboration tools, code platforms, chats, and AI systems. File servers remain, but they are no ...

Pierluigi Paganini March 13, 2026
Security
Apple issues emergency fixes for Coruna flaws in older iOS versions

Apple released iOS 16.7.15 and 15.8.7 updates for older iPhones and iPads to patch vulnerabilities linked to the Coruna exploits. Apple has released security updates for legacy devices, rolling ou ...

Pierluigi Paganini March 12, 2026
Security
Critical SQL Injection bug in Ally plugin threatens 400,000+ WordPress sites

An unauthenticated SQL injection flaw (CVE-2026-2413) in the Ally WordPress plugin, used on 400K+ sites, could allow attackers to steal sensitive data. An unauthenticated SQL injection flaw, track ...

Pierluigi Paganini March 12, 2026
Security
ENISA Technical Advisory on Secure Package Managers: Essential DevSecOps Guidance

ENISA’s first Technical Advisory on Secure Package Managers helps developers safely use third-party packages. ENISA has released its first Technical Advisory on Package Managers, focusing on how ...

Pierluigi Paganini March 12, 2026
Security
U.S. CISA adds a flaw in n8n to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in n8n to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ...

Pierluigi Paganini March 12, 2026