LastPass warns of spoofed alerts aimed at stealing master passwords
LastPass warns of spoofed alerts aimed at stealing master passwords Pierluigi Paganini March 04, 2026 LastPass warns of a phishing...
Month: March 2026
The Instagram API Scraping Crisis: When ‘Public’ Data Becomes a 17.5 Million User Breach
On January 7, 2026, a dataset containing 17.5 million Instagram user records appeared on BreachForums – a notorious dark...
Randall Munroe’s XKCD ‘Groundhog Day Meaning’
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink *** This is a Security...
MY TAKE: ChatGPT is turning into Microsoft Office — and power users are paying the price
By Byron V. Acohido Something has been shifting inside the tools millions of us use every day, and it’s...
NDSS 2025 – Detecting Server-Induced Client Vulnerabilities In Windows Remote IPC
Session 14C: Vulnerability Detection Authors, Creators & Presenters: (Except Where Noted – The Following Authors Are From The Institute...
149 Hacktivist DDoS Attacks Hit 110 Organizations in 16 Countries After Middle East Conflict
Cybersecurity researchers have warned of a surge in retaliatory hacktivist activity following the U.S.-Israel coordinated military campaign against Iran, codenamed...
Coruna iOS Exploit Kit Uses 23 Exploits Across Five Chains Targeting iOS 13–17.2.1
Google said it identified a "new and powerful" exploit kit dubbed Coruna (aka CryptoWaters) targeting Apple iPhone models running iOS...
Perplexity AI Browser Flaw Could Let Calendar Invites Access Local Files
Image: Perplexity A security flaw in Perplexity’s AI-powered Comet browser could have allowed attackers to access files on a user’s...
Google’s Biggest Android Security Update in Years Fixes 129 Bugs, Including an Actively Exploited Zero-Day
Image: Denny Müller/Unsplash Google just dropped its largest security update in nearly eight years. The March 2026 Android Security Bulletin,...
The CTEM Divide: Why 84% of Security Programs Are Falling Behind
Originally published on the Hacker News here. A new 2026 market intelligence study of 128 enterprise security decision-makers (available...
Invisible Threats: Source Code Exfiltration in Google Antigravity – FireTail Blog
TL;DR: We explored a known issue in Google Antigravity where attackers can silently exfiltrate proprietary source code By...
Attackers abuse OAuth’s built-in redirects to launch phishing and malware attacks
Attackers are abusing normal OAuth error redirects to send users from a legitimate Microsoft or Google login URL to...
From phishing to Google Drive C2: Silver Dragon expands APT41 playbook
From phishing to Google Drive C2: Silver Dragon expands APT41 playbook Pierluigi Paganini March 04, 2026 APT group Silver Dragon,...
U.S. CISA adds Qualcomm and Broadcom VMware Aria Operations flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Qualcomm and Broadcom VMware Aria Operations flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini March 04, 2026...
Data breach at University of Hawaiʻi Cancer Center impacts 1.2 Million individuals
Data breach at University of Hawaiʻi Cancer Center impacts 1.2 Million individuals Pierluigi Paganini March 04, 2026 A ransomware attack...
