Welcoming the Sri Lankan Government to Have I Been Pwned
23 August 2026 Today, we welcome the 48th government onboarded to Have I Been Pwned’s free gov service: Sri Lanka....
Security Blogs
Category Added in a WPeMatico Campaign
Slopsquatting in the Supply Chain: Weaponized AI Hallucinations
Back in April 2025, I examined 'Slopsquatting' and other new generative AI cybersecurity threats.Fast-forward 17 months, and the company Snyk...
ToxicPanda 2.0 Gets a Major Upgrade, Expanding Attacks Across 16 Countries
ToxicPanda 2.0 Gets a Major Upgrade, Expanding Attacks Across 16 Countries Pierluigi Paganini August 22, 2026 ToxicPanda 2.0 targets 349...
Malware Hijacks Android Car Head Units
Malware Hijacks Android Car Head Units Pierluigi Paganini August 22, 2026 Malware is abusing car infotainment updates to install proxy...
Critical Flaw in NASA/JPL Open-Source Spacecraft Command Software Allowed Unauthenticated Command Execution
Critical Flaw in NASA/JPL Open-Source Spacecraft Command Software Allowed Unauthenticated Command Execution Pierluigi Paganini August 22, 2026 A critical flaw...
U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 22, 2026 U.S....
Your Shredded Visa Card May Still Work at the Checkout
Your Shredded Visa Card May Still Work at the Checkout Pierluigi Paganini August 21, 2026 UMass Amherst researchers showed expired...
Friday Squid Blogging: Neon Flying Squid
Friday Squid Blogging: Neon Flying Squid The neon flying squid can fly in formation. The shoal of about 100 squid...
NIS2 Enforcement Has Started: A CISO Compliance Roadmap
Last Updated: 6 August 2026 NIS2 Enforcement Has Started: A CISO Compliance Roadmap Short answer: NIS2 has moved out of...
Six Maximum-Severity Flaws Found in Cisco Products
Six Maximum-Severity Flaws Found in Cisco Products Pierluigi Paganini August 21, 2026 Cisco patched nine critical flaws, including six rated...
AI Is Learning to Write Genetic Code
AI Is Learning to Write Genetic Code This sort of research is both exciting and terrifying: The two models in...
Fake Conferences, OAuth and WhatsApp: Inside Russia’s New Espionage Tactics
Fake Conferences, OAuth and WhatsApp: Inside Russia’s New Espionage Tactics Pierluigi Paganini August 21, 2026 Google tracks three Russia-linked espionage...
GitLab Warns of Active Exploitation of Critical GraphQL Flaw
GitLab Warns of Active Exploitation of Critical GraphQL Flaw Pierluigi Paganini August 21, 2026 GitLab flaw CVE-2026-19478 is now under...
Poland’s CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw
Poland’s CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw Pierluigi Paganini August 21, 2026 CERT Polska confirmed...
U.S. CISA adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 21, 2026 U.S. Cybersecurity and...