Pierluigi Paganini - Security Affairs retweeted
NIS2 Makes Board Members Personally Liable for Access Control Decisions
securityaffairs.com/202312/l… via @securityaffairs
#NIS2 #Cybersecurity
Pierluigi Paganini - Security Affairs retweeted
And Italy!
Replying to @nicolarsr
@nicolarsr @sonoclaudio @signorina37H @innovalabns New wave of #fridge #cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia
securityaffairs.com/202260/s…
#securityaffairs #hacking
Pierluigi Paganini - Security Affairs retweeted
‼️ BREAKING: Apple has warned German MPs and ministers that their iPhones were targeted by mercenary spyware.
The alerts started landing on 29 October, digital minister Karsten Wildberger confirmed.
Germany's cyber agency BSI told every recipient to assume their phone may be compromised.
Pierluigi Paganini - Security Affairs retweeted
The company at the center of the European supermarket refrigeration cyberattacks is Danfoss the same company whose refrigeration systems were targeted during the cyberattacks in France a few weeks ago.
Danfoss says the incidents are primarily exploiting vulnerabilities in outdated software. The company says it had previously urged customers to upgrade to newer software, but many reportedly failed to do so.
Technicians have been working around the clock, including temporarily disconnecting affected refrigeration systems from the internet.
Pierluigi Paganini - Security Affairs retweeted
🇳🇴NEW: NORWAY RAISES NATIONAL CYBER RISK TO HIGH AS ARCTIC UNIVERSITY SUFFERS TARGETED CYBERATTACK
Norway is facing a deteriorating cybersecurity environment, with authorities reporting a sharp increase in successful cyber operations.
On October 27, Norway's National Security Authority (NSM) publicly announced a HIGH national cyber risk level, the second-highest on its five-level scale.
Key findings:
• Successful cyber operations against Norwegian organisations have tripled over the past six months.
• Defence, space and critical infrastructure sectors face particularly high risks.
• Authorities warn that cyberattacks could disrupt electricity, water, mobile networks and internet services.
• NSM and the Directorate for Civil Protection have urged the public to prepare for potential disruptions.
Just three days later, on October 30, the Arctic University of Norway (UiT) disclosed a targeted cyberattack.
Attackers successfully accessed several servers, forcing the university to take affected systems offline.
University officials described the attacker as a well-resourced threat actor and confirmed that this was not a conventional DDoS attack.
As of October 31, no theft of personal information had been identified.
The attacker's identity and motives remain unknown, and no direct connection to the broader increase in cyber operations has been established.
The developments highlight growing cybersecurity challenges facing Norway, including institutions operating in the strategically important Arctic region.
Pierluigi Paganini - Security Affairs retweeted
La beffa della Sanità:fondi solo ai privatie per pagare stipendi repubblica.it/politica/2026/…
Pierluigi Paganini - Security Affairs retweeted
Al netto della violenza che distrugge ogni buona ragione, ribellarsi è giusto. Belle queste piazze.
Pierluigi Paganini - Security Affairs retweeted
L’appaltone dei 755 bagni della Camera: la spunta una ditta che finanzia Forza Italia. Di Leo Amato
ilfattoquotidiano.it/in-edic…
Pierluigi Paganini - Security Affairs retweeted
Sintetico ed efficace, come tutti gli interventi utili.
Intervento di #Pierluigi #Paganini al TG2 del 30 ottobre 2026 sul caso dell'attacco a #Binance
youtu.be/DtvhBA9TdPo
#securityaffairs #hacking
@sonoclaudio @signorina37H @CastigliMirella
Pierluigi Paganini - Security Affairs retweeted
Intervento di #PierluigiPaganini @securityaffairs al #TG2 del 30 ottobre 2026 sul caso dell'attacco a #Binance
youtu.be/DtvhBA9TdPo
#securityaffairs #hacking
Pierluigi Paganini - Security Affairs retweeted
Attacco a #Binance: in 20 minuti la #NordCorea compie il furto #criptovalute del secolo. Con il commento di #PierluigiPaganini @securityaffairs, #SandroSana @sandro_sana, #AlessioPennasilico, #GabrieleFaggioli ed altri. @RosyAuricchio cybersecurity360.it/news/att…
Pierluigi Paganini - Security Affairs retweeted
Replying to @securityaffairs @signorina37H @faffa42 @Luke_like @FBussoletti @robytenk @forensico @ransomnews @RositaRijtano
Molto meno che un riscatto ransomware.
Poi, a forza di minimizzare il danno (nessun dato è andato perso che abbiamo il backup - compreso quello in possesso dell'attaccante, nel caso possa tornare utile) si costruisce la pubblica convinzione che vada tutto bene (c'abbiamo ACN, noi 💪)
Salvo quando arriva NoName a dossare i siti della P.A., allora di scatena il putiferio stampa 🤪
Pierluigi Paganini - Security Affairs retweeted
Replying to @securityaffairs @sonoclaudio @faffa42 @Luke_like @FBussoletti @robytenk @forensico @ransomnews @RositaRijtano
La mia AI con trentamilalire lo faceva meglio 😶
Pierluigi Paganini - Security Affairs retweeted
"È un ragazzino, lasciatelo respirare". Ha suscitato polemiche sui social un video diffuso online che mostra alcuni agenti bloccare a terra un ragazzo, durante la manifestazione di venerdì 30 ottobre 2026 a Roma. Nelle immagini si sentono alcune persone che gridano alle forze dell'ordine di lasciarlo libero: "È fermo, lasciatelo respirare". E il giovane immobilizzato che urla: "Non respiro". Alle richieste, un agente che indossa il casco della polizia risponde: "È libero, è libero".
Video di black.line.21
Pierluigi Paganini - Security Affairs retweeted
🚨🇺🇸 Anthropic model weights allegedly exposed through misconfigured AWS S3 bucket
An actor using the handle "localizer" claims to have obtained a 7 GB shard of Anthropic's alleged "Claude Fable 5" model weights from a misconfigured AWS S3 bucket associated with Amazon Bedrock.
The actor claims the complete model consists of 640 shards totaling approximately 8 TB, but says only one shard was retrieved before access was restricted.
Screenshots showing a .safetensors file, model metadata, and a hexadecimal dump have been published as alleged proof. The actor is now offering the material for sale.
Claim is currently unverified. The authenticity of the files and their connection to Anthropic have not been established.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing
Readers added context they thought people might want to know
The model shown here is not a Claude model, but DeepSeek V4.1 Flash. This can be verified by the fact that the file sizes match those of DS V4.1 1017. The screenshot also includes "eu-north-1," even though it does not host Fable.
x.com/torisetxd/stat…
x.com/YipingDeng5/st…
x.com/olddonkeyblog/…
Pierluigi Paganini - Security Affairs retweeted
🚨 BREAKING: An Accenture contractor plugged a personal Claude Code agent into a secure Pentagon system, WIRED reports.
It ran on NIPRNet for 2 months and apparently sent logins and a network map to a site NIST flagged as high risk.
Accenture calls the claims "without merit".
Pierluigi Paganini - Security Affairs retweeted
‼️ UPDATE ON THE BINANCE HACK:
Whoever emptied a Binance hot wallet had 50 authorisations signed with that wallet's own private key, on-chain data shows.
Under Ethereum's EIP-7702, an authorisation is a signed permission that lets a wallet hand control of itself to code.
Each one works only for the wallet's next transaction number, its nonce. Binance's wallet was still sending transactions, so that number kept moving.
The sender didn't know which number would be live, so they packed all 50 into one transaction, Blockaid says. One matched.
That one installed a sweeper contract on the wallet. Blockaid found that only the Tornado Cash-funded sender can operate it.
Minutes later it emptied the wallet of $1.6B in USDT, 167,464 ETH and 60+ other tokens.
Only that key, or the system that holds it, can produce those signatures. How the sender got them is unknown.
Across Ethereum, Bitcoin and Tron, at least $5.57B left Binance-linked wallets.
Binance says user funds are "completely safe" but has not explained how.



























