Pierluigi Paganini

Threat actors are exploiting a critical FortiClient EMS flaw, tracked as CVE-2026-35616, to deploy malware on unpatched systems.

Carnival disclosed a data breach affecting nearly 6 million people after hackers used social engineering to access employee accounts.

BTMOB sells Android full-device takeover as a kit. It steals data, records screens, hands attackers remote control for $5K lifetime

A researcher dropped 6 Windows zero-days with no warning. Three are now exploited in the wild. Microsoft is angry. The researcher says Microsoft ignored them first.

Digital Intelligence Lab (DIL) launches DIL observatory for reading cyber events as what they actually are.

GREYVIBE, a Russia-linked group active since 2025, targets Ukraine with AI-assisted malware and five attack chains.

Hackers are texting Signal users posing as Support, asking for backup recovery keys. Once obtained, they can decrypt the message history.

Cybercrime group ShinyHunters leaked data allegedly stolen from Charter Communications, exposing millions of customer records after a failed extortion attempt.

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs.

CVE-2026-0257 lets attackers forge Palo Alto GlobalProtect auth cookies and bypass VPN login. Exploitation confirmed since May 17.