Is that vibe coded app safe? 5 checks before you download
Mobile Security As AI lets anyone build software, here’s how to vet that shiny new app before it exposes your...
Blog
U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini September 26, 2026 U.S. Cybersecurity and Infrastructure Security...
Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link
Ravie LakshmananSep 26, 2026Vulnerability / Web Security Details have emerged about a high-severity security flaw in the Elementor Website Builder WordPress...
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
Ravie LakshmananSep 26, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws...
Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack
Ravie LakshmananSep 26, 2026Threat Intelligence / Vulnerability Kiteworks (formerly Accellion) is urging customers to shut down their systems as a precautionary...
AI Agents Can Be Secured. We Can Do It.
Learn of the benefits of safely securing AI agents. I strongly support the industry’s efforts to build safety and security...
U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini September 25, 2026...
Cryptocurrency exchange Bitget Says North Korea-Linked Hackers Stole $351.6 Million
Cryptocurrency exchange Bitget Says North Korea-Linked Hackers Stole $351.6 Million Pierluigi Paganini September 25, 2026 Bitget says suspected North Korea-linked...
Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee
Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee I feel like someone who reads this blog will want...
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata...
Attackers Target Unpatched Roundcube Servers With CVE-2026-48842
Roundcube patched a high-severity vulnerability four months ago. Attackers are now targeting systems that still have not installed the fix....
ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer
ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer Pierluigi Paganini September 25, 2026 Attackers hijacked Ukrainian websites to deliver...
AI tools help hacker break in for $25 per target
if ( !emtpy($headline_subheadline ) ) : ?> A dire warning for retailers, or an unethical side-hustle for IT workers? endif;...
OpenAI wants you to use AI — but not to train its AI
if ( !emtpy($headline_subheadline ) ) : ?> Contractors fired for cutting corners when monitoring ChatGPT responses. endif; ?> Credit: Simon...
Microsoft’s new Copilot ‘super app’ unifies chat, code, agents
if ( !emtpy($headline_subheadline ) ) : ?> Microsoft’s unified Copilot could help enterprises standardize how employees interact with AI across...