Weekly Update 484
28 December 2025 I think the start of this week's video really nailed it for the techies amongst us: shit...
Blog
The Top 26 Security Predictions for 2026 (Part 2)
Last week, in part one of “The Top 26 Security Predictions for 2026,” I covered the top 15 cyber industry...
Are current PAM solutions capable of handling NHIs
How Secure Are Your Non-Human Identities? Have you ever wondered how well your organization handles Non-Human Identities (NHIs) within...
LangChain core vulnerability allows prompt injection and data exposure
LangChain core vulnerability allows prompt injection and data exposure Pierluigi Paganini December 27, 2025 A critical flaw in LangChain Core...
Inside the Biggest Cyber Attacks of 2025
2025 has emerged as one of the most disruptive years for cybersecurity, marked by unprecedented breach volumes, record-breaking credential...
NPM package with 56,000 downloads compromises WhatsApp accounts
NPM package with 56,000 downloads compromises WhatsApp accounts Pierluigi Paganini December 27, 2025 An NPM package with over 56,000 downloads...
New MongoDB Flaw Lets Unauthenticated Attackers Read Uninitialized Memory
Dec 27, 2025Ravie LakshmananDatabase Security / Vulnerability A high-severity security flaw has been disclosed in MongoDB that could allow unauthenticated...
Trust Wallet warns users to update Chrome extension after $7M security loss
Trust Wallet warns users to update Chrome extension after $7M security loss Pierluigi Paganini December 26, 2025 Trust Wallet urged...
Randall Munroe’s XKCD ‘Bridge Clearance’
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink *** This is a Security...
Pro-Russian group Noname057 claims cyberattack on La Poste services
Pro-Russian group Noname057 claims cyberattack on La Poste services Pierluigi Paganini December 26, 2025 Pro-Russian hacking group Noname057 claimed responsibility...
Aflac confirms June data breach affecting over 22 million customers
Aflac confirms June data breach affecting over 22 million customers Pierluigi Paganini December 26, 2025 A June data breach exposed...
Trust Wallet Chrome Extension Breach Caused $7 Million Crypto Loss via Malicious Code
Dec 26, 2025Ravie LakshmananCryptocurrency / Incident Response Trust Wallet is urging users to update its Google Chrome extension to the...
China-Linked Evasive Panda Ran DNS Poisoning Campaign to Deliver MgBot Malware
A China-linked advanced persistent threat (APT) group has been attributed to a highly-targeted cyber espionage campaign in which the adversary...
Best of 2025: Oracle Hack: From ‘Deny-Deny-Deny’ to ‘Oops-Oops-Oops’
Larry’s PR angels desperately dance on the head of a pin.Oracle is now admitting that, yes, an Oracle cloud service...
WordPress Vulnerability Scanner Reveals How Exposed Your Website Really Is
WordPress powers about 43% of all websites worldwide. This makes it an indispensable platform for organizations of all sizes....