Remote

securityaffairs

@securityaffairs@infosec.exchange

mastodon 4.8.0-alpha.3+glitch

Pierluigi Paganini is a former member of ENISA’s (European Union Agency for Cybersecurity) Ad Hoc Working Group on Cyber Threat Landscapes and the Cyber G7 Group. He is also a Security Evangelist, Security Analyst, and freelance writer. He is an Adjunct Professor of Cybersecurity at several Italian universities and Director of the Cybersecurity Observatory at University Pegaso. Pierluigi is a cybersecurity expert with more than 25 years of experience in the field.

1526 Followers

183 Following

50 Posts

Joined November 18, 2022

securityaffairs @securityaffairs@infosec.exchange

· 1w ago

24-Year-Old Arrested in Dutch Investigation Into #ShinyHunters https://securityaffairs.com/199979/cyber-crime/24-year-old-arrested-in-dutch-investigation-into-shinyhunters.html #securityaffairs #hacking #OpenAI #AI

securityaffairs

24-Year-Old Arrested in Dutch Investigation Into ShinyHunters

AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway

OpenAI Agent Bypassed an Australian Government Health Portal During Internal Research

U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog

Why AI Agent Sandboxes Are Failing Security Tests

Researchers Discover Hidden Backdoor in 20 Router Models Allowing Remote Root Access

U.S. CISA adds a N-able N-central flaw to its Known Exploited Vulnerabilities catalog

River Bank obtained assurances from the attackers that the stolen data in the June attack was deleted - Security Affairs

Google AI Supercharges Chrome Security, Fixing 1,072 Bugs

SilverFox Targets Japanese Manufacturer With Advanced ValleyRAT Campaign

Hackers Strike Minnesota Water Utilities, One Plant Briefly Offline

UAC-0099 Is Now Hiding Malware Inside a Fake Notepad++ Plugin to Target Ukrainian Organizations

Cybercriminals Are Leveraging Autonomous AI Offensive Security Agents

Critical GiveWP Flaw Lets Attackers Run Commands on WordPress Servers

DentaQuest disclosed a data breach that impacted +23 million individuals

U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog

Claude Mythos Shows AI Can Outpace Human Cryptography Research

Exposed SISVISA Database Leaks 102,000 Brazilian Health Surveillance Records

Foreign Hackers Target Two Colorado Water Utilities

U.S. CISA adds a Progress LoadMaster flaw to its Known Exploited Vulnerabilities catalog

EvilTokens made phishing-as-a-service look easy. Then it got taken down

Alleged Żabka Breach Exposes Jira Data, Source Code, and API Keys - Security Affairs

Broadcom Patches Critical ESXi Vulnerability Enabling Host Code Execution

Ruby on Rails Patches Critical Active Storage Vulnerability Affecting Image Processing - Security Affairs

AI Hallucination Nearly Triggered a US-China Military Confrontation

Citrix Confirmed Two New NetScaler Flaws Exploited as Zero-Day

Reuters: OpenAI Agent Hacked Hugging Face for Days Before Being Detected

U.S. CISA adds Cisco Secure Email Gateway flaw to its Known Exploited Vulnerabilities catalog

SharePoint Flaws Used to Hack Switzerland's Federal IT Agency

RatHat Turns Android Accessibility Into an Attack Weapon - Security Affairs

Cyberattack on UK Airport Operator MAG Exposes Data of 8.7 Million Customers Across Three Airports

CISA Urges Utilities to Remove Internet-Exposed PLCs After Minnesota Attacks

New Crypter-as-a-Service Cruciferra Fuels Stealthy Malware Attacks Worldwide

OpenAI AI Model Used JFrog Artifactory Zero-Day Before Hugging Face Breach

U.S. CISA adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog