AsyncRAT Malware Campaign Found Targeting South American Hotels
28
Sep
2025

AsyncRAT Malware Campaign Found Targeting South American Hotels

A new AsyncRAT malware campaign from threat actor TA558 is targeting the South American hospitality industry, demanding the attention of…

Security Affairs newsletter Round 527 by Pierluigi Paganini – INTERNATIONAL EDITION
28
Sep
2025

Security Affairs newsletter Round 543 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs newsletter Round 543 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini September 28, 2025 A new round of…

Week in review: Cisco ASA zero-day vulnerabilities exploited, Fortra GoAnywhere instances at risk
28
Sep
2025

Week in review: Cisco ASA zero-day vulnerabilities exploited, Fortra GoAnywhere instances at risk

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: How Juventus protects fans, revenue,…

Google Project Zero Details ASLR Bypass on Apple Devices Using NSDictionary Serialization
28
Sep
2025

Google Project Zero Details ASLR Bypass on Apple Devices Using NSDictionary Serialization

A Google Project Zero researcher has detailed a novel technique for remotely leaking memory addresses on Apple’s macOS and iOS….

DragonForce operator chained SimpleHelp flaws to target an MSP and its customers
28
Sep
2025

Ohio’s Union County suffers ransomware attack impacting 45,000 people

Ohio’s Union County suffers ransomware attack impacting 45,000 people Pierluigi Paganini September 27, 2025 A ransomware attack resulted in the…

Dutch teens arrested for trying to spy on Europol for Russia
28
Sep
2025

Dutch teens arrested for trying to spy on Europol for Russia

Two Dutch teenage boys aged 17, reportedly used hacking devices to spy for Russia, have been arrested by the Politie on Monday….

Microsoft Teams
27
Sep
2025

Fake Microsoft Teams installers push Oyster malware via malvertising

Hackers have been spotted using SEO poisoning and search engine advertisements to promote fake Microsoft Teams installers that infect Windows devices…

ForcedLeak flaw in Salesforce Agentforce exposes CRM data via Prompt Injection
27
Sep
2025

ForcedLeak flaw in Salesforce Agentforce exposes CRM data via Prompt Injection

ForcedLeak flaw in Salesforce Agentforce exposes CRM data via Prompt Injection Pierluigi Paganini September 27, 2025 Researchers disclosed a critical…

The Looming Authorization Crisis: Why Traditional IAM Fails Agentic AI
27
Sep
2025

The Looming Authorization Crisis: Why Traditional IAM Fails Agentic AI

In today’s enterprise world, AI no longer just answers questions or writes emails, but it takes action. From copilots booking…

An App Used to Dox Charlie Kirk Critics Doxed Its Own Users Instead
27
Sep
2025

An App Used to Dox Charlie Kirk Critics Doxed Its Own Users Instead

New research released this week shows that over the past few years the US Department of Homeland Security has collected…

Embracing the AI Revolution: How to Incorporate Generative AI into Your SOC 2 Compliance Plan
27
Sep
2025

Embracing the AI Revolution: How to Incorporate Generative AI into Your SOC 2 Compliance Plan

Generative AI (Gen AI) has emerged as a transformative force. From streamlining operations to enhancing customer experiences, AI-powered solutions offer…

Inside the Nuclear Bunkers, Mines, and Mountains Being Retrofitted as Data Centers
27
Sep
2025

Inside the Nuclear Bunkers, Mines, and Mountains Being Retrofitted as Data Centers

Data centers are responsible for running many of the services that underpin the systems we interact with every day. Transportation, logistics, energy,…