Pierluigi Paganini - Security Affairs (@securityaffairs) header
Pierluigi Paganini - Security Affairs (@securityaffairs) profile picture

Founder of Security Affairs, CYBHORUS, and Cybaze. Director of the Cybersecurity Observatory at Unipegaso, Ethical Hacker, Security Evangelist, Security Analyst

Napoli, Italy
Joined November 2011
Photo by Pierluigi Paganini - Security Affairs (@securityaffairs)Photo by Pierluigi Paganini - Security Affairs (@securityaffairs)Photo by Pierluigi Paganini - Security Affairs (@securityaffairs)Photo by Pierluigi Paganini - Security Affairs (@securityaffairs)Photo by Pierluigi Paganini - Security Affairs (@securityaffairs)Photo by Pierluigi Paganini - Security Affairs (@securityaffairs)Photo by Pierluigi Paganini - Security Affairs (@securityaffairs)Photo by Pierluigi Paganini - Security Affairs (@securityaffairs)Photo by Pierluigi Paganini - Security Affairs (@securityaffairs)
Pierluigi Paganini - Security Affairs retweeted
‼️ BREAKING: Apple has warned German MPs and ministers that their iPhones were targeted by mercenary spyware. The alerts started landing on 29 October, digital minister Karsten Wildberger confirmed. Germany's cyber agency BSI told every recipient to assume their phone may be compromised.
21
230
23
1,183
62,652
Pierluigi Paganini - Security Affairs retweeted
The company at the center of the European supermarket refrigeration cyberattacks is Danfoss the same company whose refrigeration systems were targeted during the cyberattacks in France a few weeks ago. Danfoss says the incidents are primarily exploiting vulnerabilities in outdated software. The company says it had previously urged customers to upgrade to newer software, but many reportedly failed to do so. Technicians have been working around the clock, including temporarily disconnecting affected refrigeration systems from the internet.
21
124
36
457
46,000
Pierluigi Paganini - Security Affairs retweeted
🇳🇴NEW: NORWAY RAISES NATIONAL CYBER RISK TO HIGH AS ARCTIC UNIVERSITY SUFFERS TARGETED CYBERATTACK Norway is facing a deteriorating cybersecurity environment, with authorities reporting a sharp increase in successful cyber operations. On October 27, Norway's National Security Authority (NSM) publicly announced a HIGH national cyber risk level, the second-highest on its five-level scale. Key findings: • Successful cyber operations against Norwegian organisations have tripled over the past six months. • Defence, space and critical infrastructure sectors face particularly high risks. • Authorities warn that cyberattacks could disrupt electricity, water, mobile networks and internet services. • NSM and the Directorate for Civil Protection have urged the public to prepare for potential disruptions. Just three days later, on October 30, the Arctic University of Norway (UiT) disclosed a targeted cyberattack. Attackers successfully accessed several servers, forcing the university to take affected systems offline. University officials described the attacker as a well-resourced threat actor and confirmed that this was not a conventional DDoS attack. As of October 31, no theft of personal information had been identified. The attacker's identity and motives remain unknown, and no direct connection to the broader increase in cyber operations has been established. The developments highlight growing cybersecurity challenges facing Norway, including institutions operating in the strategically important Arctic region.
12
320
43
724
36,819
Pierluigi Paganini - Security Affairs retweeted
The MAGA nightmare ends Tuesday
67
369
15
1,080
13,140
Pierluigi Paganini - Security Affairs retweeted
THREE DAYS!!!!
84
428
21
2,140
23,193
Pierluigi Paganini - Security Affairs retweeted
You better vote because they can't.
5,432
12,261
518
76,314
2,136,622
Pierluigi Paganini - Security Affairs retweeted
Al netto della violenza che distrugge ogni buona ragione, ribellarsi è giusto. Belle queste piazze.
768
508
54
2,809
53,055
Pierluigi Paganini - Security Affairs retweeted
Molto meno che un riscatto ransomware. Poi, a forza di minimizzare il danno (nessun dato è andato perso che abbiamo il backup - compreso quello in possesso dell'attaccante, nel caso possa tornare utile) si costruisce la pubblica convinzione che vada tutto bene (c'abbiamo ACN, noi 💪) Salvo quando arriva NoName a dossare i siti della P.A., allora di scatena il putiferio stampa 🤪
3
2
11
558
Pierluigi Paganini - Security Affairs retweeted
La mia AI con trentamilalire lo faceva meglio 😶
1
4
208
Pierluigi Paganini - Security Affairs retweeted
"È un ragazzino, lasciatelo respirare". Ha suscitato polemiche sui social un video diffuso online che mostra alcuni agenti bloccare a terra un ragazzo, durante la manifestazione di venerdì 30 ottobre 2026 a Roma. Nelle immagini si sentono alcune persone che gridano alle forze dell'ordine di lasciarlo libero: "È fermo, lasciatelo respirare". E il giovane immobilizzato che urla: "Non respiro". Alle richieste, un agente che indossa il casco della polizia risponde: "È libero, è libero". Video di black.line.21
62
117
15
285
28,007
Pierluigi Paganini - Security Affairs retweeted
🚨🇺🇸 Anthropic model weights allegedly exposed through misconfigured AWS S3 bucket An actor using the handle "localizer" claims to have obtained a 7 GB shard of Anthropic's alleged "Claude Fable 5" model weights from a misconfigured AWS S3 bucket associated with Amazon Bedrock. The actor claims the complete model consists of 640 shards totaling approximately 8 TB, but says only one shard was retrieved before access was restricted. Screenshots showing a .safetensors file, model metadata, and a hexadecimal dump have been published as alleged proof. The actor is now offering the material for sale. Claim is currently unverified. The authenticity of the files and their connection to Anthropic have not been established. 💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
Readers added context they thought people might want to know
The model shown here is not a Claude model, but DeepSeek V4.1 Flash. This can be verified by the fact that the file sizes match those of DS V4.1 1017. The screenshot also includes "eu-north-1," even though it does not host Fable. x.com/torisetxd/stat… x.com/YipingDeng5/st… x.com/olddonkeyblog/…
112
152
127
2,782
739,505
Pierluigi Paganini - Security Affairs retweeted
🚨 BREAKING: An Accenture contractor plugged a personal Claude Code agent into a secure Pentagon system, WIRED reports. It ran on NIPRNet for 2 months and apparently sent logins and a network map to a site NIST flagged as high risk. Accenture calls the claims "without merit".
59
131
45
1,042
68,459
Pierluigi Paganini - Security Affairs retweeted
‼️ UPDATE ON THE BINANCE HACK: Whoever emptied a Binance hot wallet had 50 authorisations signed with that wallet's own private key, on-chain data shows. Under Ethereum's EIP-7702, an authorisation is a signed permission that lets a wallet hand control of itself to code. Each one works only for the wallet's next transaction number, its nonce. Binance's wallet was still sending transactions, so that number kept moving. The sender didn't know which number would be live, so they packed all 50 into one transaction, Blockaid says. One matched. That one installed a sweeper contract on the wallet. Blockaid found that only the Tornado Cash-funded sender can operate it. Minutes later it emptied the wallet of $1.6B in USDT, 167,464 ETH and 60+ other tokens. Only that key, or the system that holds it, can produce those signatures. How the sender got them is unknown. Across Ethereum, Bitcoin and Tron, at least $5.57B left Binance-linked wallets. Binance says user funds are "completely safe" but has not explained how.
126
574
76
3,141
351,859