Randall Munroe’s XKCD ‘’Dimensional Lumber Tape Measure”
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink *** This is a Security Bloggers...
Year: 2025
Internal Security Assessor (ISA) Training Case Study: WestJet
WestJet has always worked to maintain PCI compliance across a complex environment that spans over 20 payment channels and 40...
Nation-State hackers exploit Libraesva Email Gateway flaw
Nation-State hackers exploit Libraesva Email Gateway flaw Pierluigi Paganini September 24, 2025 State-sponsored hackers exploited a vulnerability, tracked as CVE-2025-59689,...
Chinese Hackers RedNovember Target Global Governments Using Pantegana and Cobalt Strike
Sep 24, 2025Ravie LakshmananVulnerability / Network Security A suspected cyber espionage activity cluster that was previously found targeting global government...
UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors
Companies in the legal services, software-as-a-service (SaaS) providers, Business Process Outsourcers (BPOs), and technology sectors in the U.S. have been...
Two Critical Flaws Uncovered in Wondershare RepairIt Exposing User Data and AI Models
Cybersecurity researchers have disclosed two security flaws in Wondershare RepairIt that exposed private user data and potentially exposed the system...
Iranian-Backed Hackers Turn Their Fake Job Recruitment Scams on Europe
An Iranian threat group that typically has targeted organizations in the Middle East, including Israel and the United Arab Emirates,...
Securing the AI Era: Sonatype Safeguards Open Source Software Supply Chains
In the modern digital world, open source is no longer an optional convenience, it is the bedrock of most software...
SolarWinds fixed a critical RCE flaw in its Web Help Desk software
SolarWinds fixed a critical RCE flaw in its Web Help Desk software Pierluigi Paganini September 24, 2025 SolarWinds fixed a...
How threat actors breached a U.S. federal civilian agency by exploiting a GeoServer flaw
How threat actors breached a U.S. federal civilian agency by exploiting a GeoServer flaw Pierluigi Paganini September 24, 2025 US...
Feds Tie ‘Scattered Spider’ Duo to $115M in Ransoms
U.S. prosecutors last week levied criminal hacking charges against 19-year-old U.K. national Thalha Jubair for allegedly being a core member...
Another Day, Another Data Dump: Billions of Passwords Go Public
In the past few years, the security industry has seen several reports on massive password leaks. The number of...
Web Scraping: Hidden Threat to Retailers
When Resultly’s bots started scraping QVC’s website, the retail giant felt the pain immediately. Server crashes, website downtime, angry...
US Disrupts Massive Cell Phone Array in New York
This is a weird story: The US Secret Service disrupted a network of telecommunications devices that could have shut...
Trust by Design: Why Seamless Security Defines the Future of Digital Platforms
Trust is now the heartbeat of the digital world. Each year, more people move their lives online. They shop,...
