Emergency Microsoft update fixes in-the-wild Office zero-day
Emergency Microsoft update fixes in-the-wild Office zero-day Pierluigi Paganini January 26, 2026 Microsoft issued emergency updates to fix an actively...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
How smart can NHIs be in complex enterprise environments?
What Are Non-Human Identities and Why Do They Matter in Complex Enterprise Environments? Where digital transformation accelerates work processes, the...
What exciting new developments are happening in NHIs?
Are Organizations Prepared for the Challenges of Non-Human Identities? Understanding Non-Human Identities in Cybersecurity How do organizations safeguard their machine...
Top Authentication Methods for Preventing Data Breaches
Security starts with intent – the intent to protect people and systems, without slowing down everyday work. Data breaches almost...
Imperva Customers Protected Against CVE-2026-21962 in Oracle HTTP and WebLogic
What Is CVE-2026-21962? CVE-2026-21962 is a critical (CVSS 10.0) vulnerability in the Oracle HTTP Server and the WebLogic Server Proxy...
Randall Munroe’s XKCD ‘High Altitude Cooking Instructions’
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink *** This is a Security Bloggers...
ShinyHunters claims 2 Million Crunchbase records; company confirms breach
ShinyHunters claims 2 Million Crunchbase records; company confirms breach Pierluigi Paganini January 26, 2026 Crunchbase confirms a data breach after...
Energy sector targeted in multi-stage phishing and BEC campaign using SharePoint
Energy sector targeted in multi-stage phishing and BEC campaign using SharePoint Pierluigi Paganini January 26, 2026 Microsoft warns of a...
Google’s Universal Commerce Protocol: Why the Future of Agentic Commerce Depends on Security
The race to standardize agentic commerce just accelerated dramatically. Google’s Universal Commerce Protocol (UCP) is positioning itself as connective tissue...
Secure, Reliable Terraform At Scale With Sonatype Nexus Repository
Terraform has become the de facto standard for infrastructure as code (IaC). From cloud-native startups to global enterprises, teams rely...
Indian Users Targeted in Tax Phishing Campaign Delivering Blackmoon Malware
Ravie LakshmananJan 26, 2026Cyber Espionage / Malware Cybersecurity researchers have discovered an ongoing campaign that's targeting Indian users with a...
Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code
Ravie LakshmananJan 26, 2026AI Security / Vulnerability Cybersecurity researchers have discovered two malicious Microsoft Visual Studio Code (VS Code) extensions...
PeckBirdy: A Versatile Script Framework for LOLBins Exploitation Used by China-aligned Threat Groups
We discovered two threat campaigns that used PeckBirdy in their operations. Based on victimology and the tools, tactics, and procedures...
Microsoft Shared BitLocker Keys With FBI, Raising Privacy Fears
Image: Simon Ray/Unsplash Microsoft is under scrutiny after it emerged that the company shared encryption keys with US law enforcement,...
Generative AI and cybersecurity: What Sophos experts expect in 2026
AI has dominated cybersecurity headlines for years, but as we enter 2026, the conversation is shifting from hype to hard...
