WhatsApp Help Pages Leaked Hidden Instructions for a Meta Chatbot
Around 80 pages on WhatsApp’s website exposed instructions that were designed for its chatbot, including “WHAT NOT TO SAY.” Meta...
Blog
The AI Exchange: Innovators in Payment Security Featuring AuditSafe
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature...
AI Governance in Higher Education: A University CISO’s Playbook
Last Updated: 5 October 2026 Higher educationAI governancePlaybook10 min read Every AI governance guide I read assumes the same thing:...
Meta wants to scrape your website to train its AI, and you can’t say no
Meta wants to scrape your website to train its AI, and you can’t say no Pierluigi Paganini October 19, 2026...
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives...
Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor
Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from...
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone...
GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories
The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects...
From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software
The Hacker NewsOct 19, 2026Artificial Intelligence / Enterprise Security In Salesforce Agentforce, the recommended way to make an agent respond...
Deepfakes and Election Manipulation: UK Watchdog Seeks Faster Detection
Deepfakes and Election Manipulation: UK Watchdog Seeks Faster Detection Pierluigi Paganini October 19, 2026 The UK Electoral Commission is building...
Big Fish: OpenBSD Root Exploit Chains a 37-Year-Old BSD Bug With a Kernel Flaw
Big Fish: OpenBSD Root Exploit Chains a 37-Year-Old BSD Bug With a Kernel Flaw Pierluigi Paganini October 19, 2026 OpenBSD...
Attackers Abuse Stolen ConnectWise Application Credentials to Target Microsoft 365
Attackers Abuse Stolen ConnectWise Application Credentials to Target Microsoft 365 Pierluigi Paganini October 19, 2026 Attackers stole ConnectWise application credentials...
Japan’s SiteGuard WAF flaw CVE-2026-106931 is already being exploited
Japan’s SiteGuard WAF flaw CVE-2026-106931 is already being exploited Pierluigi Paganini October 19, 2026 Attackers are exploiting vulnerability CVE-2026-106931 in...
Weekly Update 526: Building HIBP AI/SI First
19 October 2026 I have this sense that we've passed the point where "vibe coding" is a derogatory term. I...
Training AIs to Solve CAPTCHAs
Training AIs to Solve CAPTCHAs Interesting research: Abstract: Vision-language models (VLMs) can solve visual CAPTCHAs without task-specific training, but the...