SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
Ravie LakshmananSep 26, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws...
Blog
Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack
Ravie LakshmananSep 26, 2026Threat Intelligence / Vulnerability Kiteworks (formerly Accellion) is urging customers to shut down their systems as a precautionary...
AI Agents Can Be Secured. We Can Do It.
Learn of the benefits of safely securing AI agents. I strongly support the industry’s efforts to build safety and security...
U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini September 25, 2026...
Cryptocurrency exchange Bitget Says North Korea-Linked Hackers Stole $351.6 Million
Cryptocurrency exchange Bitget Says North Korea-Linked Hackers Stole $351.6 Million Pierluigi Paganini September 25, 2026 Bitget says suspected North Korea-linked...
Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee
Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee I feel like someone who reads this blog will want...
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata...
Attackers Target Unpatched Roundcube Servers With CVE-2026-48842
Roundcube patched a high-severity vulnerability four months ago. Attackers are now targeting systems that still have not installed the fix....
ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer
ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer Pierluigi Paganini September 25, 2026 Attackers hijacked Ukrainian websites to deliver...
AI tools help hacker break in for $25 per target
if ( !emtpy($headline_subheadline ) ) : ?> A dire warning for retailers, or an unethical side-hustle for IT workers? endif;...
OpenAI wants you to use AI — but not to train its AI
if ( !emtpy($headline_subheadline ) ) : ?> Contractors fired for cutting corners when monitoring ChatGPT responses. endif; ?> Credit: Simon...
Microsoft’s new Copilot ‘super app’ unifies chat, code, agents
if ( !emtpy($headline_subheadline ) ) : ?> Microsoft’s unified Copilot could help enterprises standardize how employees interact with AI across...
Adobe’s next platform for Creative Cloud? Your AI assistant
if ( !emtpy($headline_subheadline ) ) : ?> ‘We want to be wherever the user is,’ says Deepti Pradeep, Adobe’s senior...
iOS 27: Why you should learn to love Impersonation Risk Detection
if ( !emtpy($headline_subheadline ) ) : ?> Apple’s new scam-prevention tool opens a new line of defense against online crime....
Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware
Ravie LakshmananSep 25, 2026Malware / Supply Chain Attack Two actions-cool GitHub Actions have been disabled for a second time after...