Security Flaw in WordPress Plugin Puts 400,000 Websites at Risk
Image: Adobe A vulnerability in a widely used WordPress accessibility plugin could allow attackers to steal sensitive data from affected...
Blog
When Proxies Become the Attack Vectors in Web Architectures
Many Reverse proxy attack vectors expose a flawed assumption in modern web architectures that backends can blindly trust security-critical...
IO River Embraces Wasm to Enable Any WAF to Run on Any CDN
IO River this week revealed it is leveraging the portable WebAssembly (Wasm) binary instruction format to make it possible...
Apple issues emergency fixes for Coruna flaws in older iOS versions
Apple issues emergency fixes for Coruna flaws in older iOS versions Pierluigi Paganini March 12, 2026 Apple released iOS 16.7.15...
Critical SQL Injection bug in Ally plugin threatens 400,000+ WordPress sites
Critical SQL Injection bug in Ally plugin threatens 400,000+ WordPress sites Pierluigi Paganini March 12, 2026 An unauthenticated SQL injection...
Destructive Activity Targeting Stryker Highlights Emerging Supply Chain Risks
Blogs Blog In this post, we examine the disruptive cyber activity targeting Stryker, potential links to the Handala persona,...
Reuse, Reward: How Banks Can Safely Unlock the Value of Their Data
The financial world is awash with data. But too few organizations are able to use it effectively. In Bank...
The Threat Within: How Intelligent Detection Prevented a Potential Internal Malware Incident
Executive Overview Organizations often focus heavily on defending their perimeter against external attackers. Firewalls, threat intelligence feeds, and intrusion...
Rust-Based VENON Malware Targets 33 Brazilian Banks with Credential-Stealing Overlays
Ravie LakshmananMar 12, 2026Malware / Cybercrime Cybersecurity researchers have disclosed details of a new banking malware targeting Brazilian users that's...
Hive0163 Uses AI-Assisted Slopoly Malware for Persistent Access in Ransomware Attacks
Ravie LakshmananMar 12, 2026Artificial Intelligence / Malware Cybersecurity researchers have disclosed details of a suspected artificial intelligence (AI)-generated malware codenamed...
How to Scale Phishing Detection in Your SOC: 3 Steps for CISOs
Phishing has quietly turned into one of the hardest enterprise threats to expose early. Instead of crude lures and obvious...
ThreatsDay Bulletin: OAuth Trap, EDR Killer, Signal Phishing, Zombie ZIP, AI Platform Hack & More
Ravie LakshmananMar 12, 2026Cybersecurity / Hacking News Another Thursday, another pile of weird security stuff that somehow happened in just...
Iran-Linked Hacktivists Hit Stryker, Knocking Employees Offline Across Multiple Countries
Image: przemekklos/Envato A cyberattack has disrupted global operations at medical technology manufacturer Stryker, forcing employees in multiple countries offline and...
Meta Rolls Out New Scam Alerts Across Facebook, WhatsApp, and Messenger
Image: Mariia Shalabaieva/Unsplash Meta is significantly expanding its anti-scam arsenal across Facebook, Messenger, and WhatsApp, introducing a suite of AI-powered...
Post-Quantum Cryptography for Authentication: The Enterprise Migration Guide 2026
Imagine a classified government file, encrypted today with RSA-2048, containing diplomatic communications that will remain sensitive for the next...