Company
Security Affairs is a cybersecurity news blog run by researcher Pierluigi Paganini, covering malware, data breaches, vulnerabilities, and threat intelligence.
Italy's Foreign Ministry says its protection systems mitigated an attack on its website on the morning of October 8, with no disruption. Rome will now work with Romania and other EU states on proposals to formally name the actors behind cyberattacks on Italian institutions.
Reality
Hunt.io found that BraZetsu's servers had moved hosts months before Group-IB's August 31 report named them. Defenders who block only the published addresses are pointing at infrastructure the operators had already abandoned.
Reality
CISA added Apple's CoreGraphics zero-day CVE-2026-86950 to its KEV catalog, giving federal agencies until October 2, 2026 to patch. Only federal civilian agencies are bound by that date. Every other Apple fleet sets its own deadline for a bug Apple links to targeted attacks.
Reality
Three exploited flaws, three very different exposure classes. The self-hosted Metabase zero-day is the one with an unpatched population behind it.
Reality
Researcher Dancho Danchev matched 205 handles from a 2005-2008 Exploit.in dump to private messages on five later forums, 26 of them from active early members. A matching handle does not prove a matching person, so 205 is a ceiling, but the forum's core was only about 90 accounts, few enough to follow from board to board.
Reality
Revolut says its own systems were not breached; the fraudulent European Investigation Orders arrived from an authentic pec.interno.it mailbox, and the actor behind them claims six months inside Italian law-enforcement systems.
Reality
ENISA says in a July 2026 assessment that the research-and-develop delay defenders implicitly count on is disappearing as automated systems take over the attacker's work, with the remaining window measured in minutes.
Reality
Hunt.io rebuilt the framework from five directories the operators left open, and found the worker roles fixed while the model profile stays a swappable setting, with requests fronted by private proxies instead of vendor APIs.
Reality
Ransomnews validated the sample as real The Town 2025 buyer data, down to the 487.50-real student ticket, but every row carries a single export timestamp that points away from Ticketmaster and at an unnamed partner.
Reality
The StopAndProtect campaign keeps its payloads, command channel and stolen-file storage on other people's blogs. That makes domain reputation a weaker signal, and cleanup somebody else's bill.
Reality