NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
Cybersecurity researchers have disclosed details of a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies that's used as a proxy to...
Blog
CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing
Swati KhandelwalAug 26, 2026Red Teaming / Security Operations The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published the results...
Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code
The CERT Coordination Center (CERT/CC) has disclosed two unpatched vulnerabilities in Kaltura's HTML5 video player library that allow a remote,...
WhatsApp Just Added 3 New Ways to Protect Your Account
WhatsApp is adding three new security features designed to make account takeovers and scam calls harder to pull off. The...
The Password Notebook Is Back — but Is It Actually Safer?
The password notebook is making an unlikely comeback, and this time security professionals have more reason to take the idea...
TikTok Agrees to $400M Settlement Over Children’s Privacy
TikTok’s long-running fight with the US government over children’s data now carries a price tag of up to $400 million....
U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 26, 2026 U.S. Cybersecurity and Infrastructure...
88 ID Verification Breaches Show the Cost of Collecting Identity Data
88 ID Verification Breaches Show the Cost of Collecting Identity Data Pierluigi Paganini August 26, 2026 88 ID-verification breaches exposed...
WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion
WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion Pierluigi Paganini August 26, 2026 WhatsApp says 1 billion users now...
Operation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global Scams
Operation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global Scams Pierluigi Paganini August 26, 2026 INTERPOL’s Operation Jackal...
If OpenAI has nothing to hide, it has nothing to fear
The company has also said it is making something completely new, so it doesn’t need Apple’s secrets anyway. But that...
What are ‘open’ AI models?
China is a proponent of open source and open weight models as it increasingly becomes an AI rival to the...
How to unlock Google’s new Pixel vibration wizardry on any Android phone
The blank canvas for your Pixel-11-style custom Android vibration rule.For this step, you’ll tap the words “do nothing” to create...
Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine
The SOC we've always known was built around a model that guarantees most of the alert queue will never receive...
Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users’ Reservations in Tests
Swati KhandelwalAug 26, 2026AI Security / Application Security Aikido Security has published research that recreates the Australian gym-booking incident in...