Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet
Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months,...
2025
Secure by Design in practice: a year of progress on Sophos Firewall
A year ago we published our Secure by Design 2025 progress update, reviewing our commitments against the seven pillars of...
The stack had a good run. Defense systems are the future.
Something shifted in late 2025 that I don't think our industry has fully reckoned with yet. When frontier AI models crossed...
The stack had a good run. Defense systems are the future.
Something shifted in late 2025 that I don't think our industry has fully reckoned with yet. When frontier AI models crossed...
Claude Code Espionage Campaign Exposes a New Enterprise AI Risk
In September 2025, Anthropic detected suspicious activity in its Claude Code tool, which turned out to be a state-sponsored espionage...
Webworm: New burrowing techniques
ESET researchers analyzed the 2025 activity of Webworm, a China-aligned APT group that started out targeting organizations in Asia, but...
Webworm: New burrowing techniques
ESET researchers analyzed the 2025 activity of Webworm, a China-aligned APT group that started out targeting organizations in Asia, but...
2026: The Year of AI-Assisted Attacks
On December 4, 2025, a 17-year-old was arrested in Osaka under Japan’s Unauthorized Access Prohibition Act. The young man had...
French police arrest 21-year-old “HexDex” hacker over 100 alleged data breaches
A 21-year-old man suspected of conducting approximately 100 data breaches since late 2025 - including a hack of the French...
Top Five Sales Challenges Costing MSPs Cybersecurity Revenue
The managed security services market is projected to grow from $38.31 billion in 2025 to $69.16 billion by 2030, with...
Emulating the Concealed Sinobi Ransomware
Sinobi is a financially motivated ransomware group that emerged in late June 2025, operating a closed, hybrid Ransomware-as-a-Service (RaaS)...
China-Linked groups target Southeast Asian government with advanced malware in 2025
China-Linked groups target Southeast Asian government with advanced malware in 2025 Pierluigi Paganini March 30, 2026 China-linked groups hit a...
The State of Secrets Sprawl 2026: 9 Takeaways for CISOs
Secrets sprawl isn't slowing down: in 2025, it accelerated faster than most security teams anticipated. GitGuardian's State of Secrets Sprawl...
The Kill Chain Is Obsolete When Your AI Agent Is the Threat
In September 2025, Anthropic disclosed that a state-sponsored threat actor used an AI coding agent to execute an autonomous cyber...
QualDerm Partners December 2025 data breach impacts over 3 Million people
QualDerm Partners December 2025 data breach impacts over 3 Million people Pierluigi Paganini March 24, 2026 Over 3.1M people affected...
