Fake Conferences, OAuth and WhatsApp: Inside Russia’s New Espionage Tactics
Fake Conferences, OAuth and WhatsApp: Inside Russia’s New Espionage Tactics Pierluigi Paganini August 21, 2026 Google tracks three Russia-linked espionage...
Security Blogs
Category Added in a WPeMatico Campaign
GitLab Warns of Active Exploitation of Critical GraphQL Flaw
GitLab Warns of Active Exploitation of Critical GraphQL Flaw Pierluigi Paganini August 21, 2026 GitLab flaw CVE-2026-19478 is now under...
Poland’s CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw
Poland’s CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw Pierluigi Paganini August 21, 2026 CERT Polska confirmed...
U.S. CISA adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 21, 2026 U.S. Cybersecurity and...
Cl0p Targets 40+ Organizations Through PTC Windchill Flaw
Cl0p Targets 40+ Organizations Through PTC Windchill Flaw Pierluigi Paganini August 21, 2026 Cl0p claims over 40 organizations fell victim...
More Incidents of AIs Going Rogue in Cybersecurity Challenges
More Incidents of AIs Going Rogue in Cybersecurity Challenges The AI Security Institute has a new report of AI systems...
Non-Human Identity Security for AI Agents: A CISO Guide to Ownership, Least Privilege, and Lifecycle Control
Last Updated: 12 August 2026 Executive Summary Non-human identity security for AI agents gives CISOs a disciplined way to assign...
Manic: The Android Malware That Exfiltrates Data Even When the Phone Is Offline
Manic: The Android Malware That Exfiltrates Data Even When the Phone Is Offline Pierluigi Paganini August 20, 2026 Manic Android...
NSA, CISA, FBI, DOE, and EPA Warn of Active AI-Assisted Attacks on Siemens S7 PLCs
NSA, CISA, FBI, DOE, and EPA Warn of Active AI-Assisted Attacks on Siemens S7 PLCs Pierluigi Paganini August 20, 2026...
Aligning Cybersecurity with Business Goals
Last Updated: 22 June 2026 Aligning Cybersecurity with Business Goals Cybersecurity leaders often face the same frustrating question from boards...
Agentic AI Security in 2026: A 90-Day CISO Implementation Plan Beyond the Checklist
Published: 16 August 2026 Executive Summary Agentic AI security is now a leadership and engineering discipline: CISOs need a practical...
Non-Human Identity Sprawl: A CISO Guide to Service Accounts, API Keys, and AI Agents
Last Updated: 6 August 2026 Non-Human Identity Sprawl: A CISO Guide to Service Accounts Short answer: Your machine identities, service...
Dr Eric Cole Shaped How I Think About Security. Here Is What He Taught Me.
Published: 10 August 2026 Dr Eric Cole Shaped How I Think About Security. Here Is What He Taught Me The...
FreeBSD Released the Most Security Advisories in Project History in June 2026
On average, the FreeBSD security team releases about 2 security advisories per month. AI has changed this. In April, the project...
I Wrote a New Book for Corelight
TLDR: I wrote a new book for Corelight called NDR Essentials. It's free at that link. This is the 10th...