Randall Munroe’s XKCD ‘SNEWS’
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink *** This is a Security...
Month: March 2026
How to Implement Just-in-Time (JIT) User Provisioning with SSO and SCIM
Just-in-Time (JIT) provisioning creates users automatically during SSO login. SCIM provisioning creates and manages users using standardized APIs before...
Everyone Is Deploying AI Agents. Almost Nobody Knows What They’re Doing.
One constant I hear from CISOs I speak with is that AI agents are not coming. They are already...
Technical Analysis of SnappyClient
IntroductionIn December 2025, Zscaler ThreatLabz identified a new command-and-control (C2) framework implant that we track as SnappyClient, which was delivered...
Are you ready for shape-shifting apps?
In November, Apple strengthened its App Review guidelines with a new rule to prevent app impersonation. “You cannot use another...
OFAC Sanctions DPRK IT Worker Network Funding WMD Programs Through Fake Remote Jobs
The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) has sanctioned six individuals and two entities for...
Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access
Ravie LakshmananMar 18, 2026Network Security / Ransomware Amazon Threat Intelligence is warning of an active Interlock ransomware campaign that's exploiting...
Apple Rolls Out Real-Time Security Fixes Across iPhone, iPad, and Mac
Image: Generated via Google’s Nano Banana What if your iPhone could fix security flaws before you even notice them? Apple...
Google’s $32B Wiz Bet: Why Security Consolidation Means You’re Losing Negotiating Power
In July 2024, Google approached Wiz with a $23 billion acquisition offer. Wiz declined. By 2026, reports suggest Google...
Enterprise AI Agent Governance: A Layered Approach (Build, Deployment and Runtime)
Emerging Governance Challenges As organizations implement AI agents on a large scale, they are likely to encounter governance challenges....
Threat Detection with MITRE ATT&CK and D3FEND AI Agent
Mar 18, 2026 Threat Detection with MITRE ATT&CK and D3FEND AI Agent This blog post is the first in...
CVE-2026-3888: Ubuntu Desktop 24.04+ vulnerable to Root exploit
CVE-2026-3888: Ubuntu Desktop 24.04+ vulnerable to Root exploit Pierluigi Paganini March 18, 2026 Ubuntu flaw CVE-2026-3888 lets attackers gain root...
Robotic surgery firm Intuitive reports data breach after targeted phishing attack
Robotic surgery firm Intuitive reports data breach after targeted phishing attack Pierluigi Paganini March 18, 2026 Intuitive suffered a phishing...
Tracking the Iran War: A Month of Escalation and Regional Impact
Tracking the Iran War: A Month of Escalation and Regional Impact Pierluigi Paganini March 18, 2026 Iran war likely prolonged,...
Is All OAuth The Same For MCP?
There’s a funny saying making the rounds right now: “The S in MCP stands for security.” Of course, there is...
