The AI Exchange: Innovators in Payment Security Featuring IBM
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
ChainScript: the RAT that hides its command server inside a blockchain contract
ChainScript: the RAT that hides its command server inside a blockchain contract Pierluigi Paganini September 21, 2026 Blackpoint uncovers ChainScript,...
Reverse-Engineering Flock Cameras
Reverse-Engineering Flock Cameras Hackers captured a Flock camera and got a look (alternate link) at the software: While much of...
⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks
A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week. The trouble...
TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data
Ravie LakshmananSep 21, 2026Endpoint Security / Malware Cybersecurity researchers have disclosed details of a new campaign dubbed TASK#STOMP that delivers...
Google Wants Android Apps to Look Beyond the Security Patch Date
Android security is becoming less about one date and more about what is actually patched. Google has released stable versions...
US and China Discuss Alerting Each Other to AI National Security Threats
Officials discussed setting up a mechanism for the two countries to notify each other of AI incidents which could threaten...
Taking the Cyber Drill to the World Stage: My Session at The World CIO 200 Summit Grand Finale, Sri Lanka
Published: 21 September 2026 Most incident response plans fail on paper before they fail in production. Nobody reads them until...
A BYD Shark 6 Hack Shows the Risks of Connected Cars
A BYD Shark 6 Hack Shows the Risks of Connected Cars Pierluigi Paganini September 21, 2026 A BYD Shark 6...
The Target Is No Longer the Model. It’s the Agent.
The Target Is No Longer the Model. It’s the Agent. Pierluigi Paganini September 21, 2026 AI agents are becoming the...
UK Police Data Faces Long-Standing Microsoft Cloud Security Concerns
UK Police Data Faces Long-Standing Microsoft Cloud Security Concerns Pierluigi Paganini September 21, 2026 A 2017 UK assessment warned that...
Microsoft is pulling the plug on Publisher. What now?
if ( !emtpy($headline_subheadline ) ) : ?> Microsoft is retiring its 35-year-old desktop publishing software in October. Here’s how to...
ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure
Threat actors are leveraging ClickFix-like lures to deliver a previously undocumented remote access trojan (RAT) called ChainScript. "ChainScript has appeared...
Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors
Ravie LakshmananSep 21, 2026Malware / Social Engineering The North Korean threat actor known as Jade Sleet has been attributed to...
Australia’s multiculturalism is a precious achievement
When I arrived in 1981 as a 12-year-old from Greece, I could not have imagined that three decades later I...