Automate or orchestrate? Implementing a streamlined remediation program to shorten MTTR
Automate or orchestrate? Implementing a streamlined remediation program to shorten MTTR Pierluigi Paganini March 04, 2026 Security teams want lower...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Smashing Security podcast #457: How a cybersecurity boss framed his own employee
When a top cybersecurity firm discovered it had a leak, you would expect the FBI to be called. Instead, the...
How does NHI management empower proactive security measures
What Does NHI Management Mean for Your Enterprise’s Security? How do organizations ensure their digital assets remain secure amidst...
Is investing in advanced AI cybersecurity justified
Are You Safeguarding Your Business With Non-Human Identities? Have you ever wondered how secure your organization’s systems are against...
6 Minutes and a Prayer: The Math Your SOC Doesn’t Want You to See
Your analysts are gambling with alerts, and the math proves it. The cybersecurity industry has quietly agreed to avoid...
NDSS 2025 – On The Realism Of LiDAR Spoofing Attacks Against Autonomous Driving Vehicle
Session 14D: Autonomous Vehicles Authors, Creators & Presenters: Ningfei Wang (University of California, Irvine), Shaoyuan Xie (University of California,...
Microsoft 365: A guide to the updates
Get more info about Version 2511 (Build 19426.20186). Version 2511 (Build 19426.20170) Release date: December 3, 2025 This build includes,...
LastPass warns of spoofed alerts aimed at stealing master passwords
LastPass warns of spoofed alerts aimed at stealing master passwords Pierluigi Paganini March 04, 2026 LastPass warns of a phishing...
The Instagram API Scraping Crisis: When ‘Public’ Data Becomes a 17.5 Million User Breach
On January 7, 2026, a dataset containing 17.5 million Instagram user records appeared on BreachForums – a notorious dark...
Randall Munroe’s XKCD ‘Groundhog Day Meaning’
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink *** This is a Security...
MY TAKE: ChatGPT is turning into Microsoft Office — and power users are paying the price
By Byron V. Acohido Something has been shifting inside the tools millions of us use every day, and it’s...
NDSS 2025 – Detecting Server-Induced Client Vulnerabilities In Windows Remote IPC
Session 14C: Vulnerability Detection Authors, Creators & Presenters: (Except Where Noted – The Following Authors Are From The Institute...
149 Hacktivist DDoS Attacks Hit 110 Organizations in 16 Countries After Middle East Conflict
Cybersecurity researchers have warned of a surge in retaliatory hacktivist activity following the U.S.-Israel coordinated military campaign against Iran, codenamed...
Coruna iOS Exploit Kit Uses 23 Exploits Across Five Chains Targeting iOS 13–17.2.1
Google said it identified a "new and powerful" exploit kit dubbed Coruna (aka CryptoWaters) targeting Apple iPhone models running iOS...
Perplexity AI Browser Flaw Could Let Calendar Invites Access Local Files
Image: Perplexity A security flaw in Perplexity’s AI-powered Comet browser could have allowed attackers to access files on a user’s...
