CISA Flags 2-Year-Old Oracle WebLogic Vulnerability as Actively Exploited
A patch that should have retired an Oracle WebLogic vulnerability two years ago is now the reason CISA is sounding...
Blog
Cyber espionage campaign targeted stock exchange executive’s Outlook account
Cyber espionage campaign targeted stock exchange executive’s Outlook account Pierluigi Paganini June 03, 2026 Attackers spent five months silently stealing...
Russia’s FSB Says Foreign Spies Infected Officials’ Phones With Malware
Russia’s FSB Says Foreign Spies Infected Officials’ Phones With Malware Pierluigi Paganini June 03, 2026 Russia’s FSB claims foreign intelligence...
Request for Comments: PCI Data Security Standard (PCI DSS) v4.0.1
From 3 June to 20 July, eligible PCI SSC stakeholders are invited to review and provide feedback on the currently...
U.S. CISA adds Android and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Android and Linux Kernel flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 03, 2026 U.S. Cybersecurity...
Google Patches Actively Exploited Android Flaw Affecting Millions of Devices
Google Patches Actively Exploited Android Flaw Affecting Millions of Devices Pierluigi Paganini June 03, 2026 Google fixed 124 Android flaws,...
After a quick 1.1M sales, MacBook Neo set to reshape the PC industry
Apple’s great game IDC’s figures confirm Apple’s strategy is working, with strong demand for the Neo, and, indeed, all Apple’s...
One-Click GitHub Dev Attack Lets Attackers Steal Full GitHub OAuth Tokens
Ravie LakshmananJun 03, 2026Vulnerability / Software Development Cybersecurity researchers have disclosed a one-click attack via Microsoft Visual Studio Code (VS...
Shrinking the IAM Attack Surface through Identity Visibility and Intelligence Platforms (IVIP)
The Fragmented State of Modern Enterprise Identity Enterprise IAM is approaching a breaking point. As organizations scale, identity becomes increasingly...
Beyond the Zero-Day: See Your Network Like an Attacker | Webinar with HD Moore
The Hacker NewsJun 03, 2026Exposure Management Assume the breach. Zero-days keep shipping, AI is writing exploits faster than anyone patches,...
Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes
Ravie LakshmananJun 03, 2026Vulnerability / Network Security Cybersecurity researchers have disclosed details of an unpatched issue that could be exploited...
New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare
Ravie LakshmananJun 03, 2026Vulnerability / Server Security Cybersecurity researchers have discovered a remote denial-of-service exploit that affects major web servers,...
Cisco Live 2026: New Security Tools Target AI Threats
This week’s Cisco Live event in Las Vegas featured a raft of product announcements as the company prepares its portfolio...
Why an HP Poly VoIP Phones Bug Could Become an Enterprise Foothold
Why an HP Poly VoIP Phones Bug Could Become an Enterprise Foothold Pierluigi Paganini June 03, 2026 Rapid7 details a...
Welcoming the Philippine Government to Have I Been Pwned
03 June 2026 Today, we welcome the 46th government onboarded to Have I Been Pwned’s free gov service: the Philippines.The...