Is “SIEM-less” really what it sounds like?
A SIEM is a multipurpose tool. It brings together cyber and physical security use cases; drives threat detection, investigation, and...
Blog
Meta Faces $25 Billion Penalty Linked to Cambridge Analytica Scandal
Meta Faces $25 Billion Penalty Linked to Cambridge Analytica Scandal Pierluigi Paganini October 23, 2026 A New Mexico judge ordered...
PHP2Shell: Millions of Attacks, No Confirmed Successful Exploits Yet
PHP2Shell: Millions of Attacks, No Confirmed Successful Exploits Yet Pierluigi Paganini October 23, 2026 PHP2Shell attacks have surged into the...
INTERPOL Operation Serengeti III Nets 1,462 Arrests and Recovers $105 Million in Cybercrime Crackdown
INTERPOL Operation Serengeti III Nets 1,462 Arrests and Recovers $105 Million in Cybercrime Crackdown Pierluigi Paganini October 23, 2026 INTERPOL’s...
Compromised TLS Certificates
Compromised TLS Certificates The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra...
SAP lets AI play key role in its certification renewal process
if ( !emtpy($headline_subheadline ) ) : ?> The SAP Stay Certified program now offers an optional AI-based way to perform...
eMudhra quits global TLS certificate market after compromise of CA signing keys
if ( !emtpy($headline_subheadline ) ) : ?> Security experts urge organizations to review certificate dependencies beyond browsers as trust-store changes...
7 out-of-sight Googlebook highlights
if ( !emtpy($headline_subheadline ) ) : ?> Some of the Googlebook's most interesting features are the ones you barely hear...
URGENT – PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches
Swati KhandelwalOct 23, 2026Vulnerability / Web Security PHP has warned of another way an attacker could run code on a...
Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack
Ravie LakshmananOct 23, 2026Malware / Cyber Espionage The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to...
Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
Swati KhandelwalOct 23, 2026Vulnerability / Web Security Pillow, the most widely used image library for Python, can be made to...
Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
Swati KhandelwalOct 23, 2026Vulnerability / Web Security Malicious Brotli data can make an application on an official build of Node.js...
Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances
AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token...
MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
Executive summary This report analyzes activity during which UAC‑0099 gained initial access on July 16th, 2025 and handed it off...
Azul issues urgent Java security updates following eMudhra certificate compromise
Azul has issued an out-of-cycle security update after the compromise of eight eMudhra intermediate Certificate Authority (CA) certificates, publicly disclosed...