CVE-2026-1731 fuels ongoing attacks on BeyondTrust remote access products
CVE-2026-1731 fuels ongoing attacks on BeyondTrust remote access products Pierluigi Paganini February 23, 2026 Attackers are exploiting CVE-2026-1731 in BeyondTrust...
access
PromptSpy abuses Gemini AI to gain persistent access on Android
PromptSpy abuses Gemini AI to gain persistent access on Android Pierluigi Paganini February 20, 2026 PromptSpy is the first Android...
French Ministry confirms data access to 1.2 Million bank accounts
French Ministry confirms data access to 1.2 Million bank accounts Pierluigi Paganini February 18, 2026 A hacker accessed data from...
Master XDR Investigations: A Deep Dive into the GravityZone XDR Demo Incident
An attacker’s initial access, whether through phishing, unmanaged devices, exploited vulnerabilities, or a compromised supply chain, marks the beginning...
A security flaw at DavaIndia Pharmacy allowed attackers to access customers’ data and more
A security flaw at DavaIndia Pharmacy allowed attackers to access customers’ data and more Pierluigi Paganini February 16, 2026 A...
2026: When Every AI Agent Becomes a SOX Risk
Boards have spent years asking if people have too much access. In 2026, the harder question is whether your...
Microsoft Patches Windows Flaw Causing VPN Disruptions
Image: AndersonPiza/Envato Microsoft has patched a vulnerability in the Windows Remote Access Connection Manager (RasMan) service that was being exploited...
TA584 threat actor leverages Tsundere Bot and XWorm for network access
A prolific initial access broker, identified as TA584, has been observed employing the Tsundere Bot in conjunction with the XWorm...
ZeroDayRAT spyware grants attackers total access to mobile devices
ZeroDayRAT spyware grants attackers total access to mobile devices Pierluigi Paganini February 10, 2026 ZeroDayRAT is a commercial mobile spyware...
Versa SASE Platform Now Prevents Sensitive Data From Being Shared With AI
Versa has added the ability to analyze text to its security access service edge (SASE) platform to make it...
Agentic AI and Non‑Human Identities Demand a Paradigm Shift In Security: Lessons from NHIcon 2026
In the race to innovate, software has repeatedly reinvented how we define identity, trust, and access. In the 1990's, the...
Build Practical Cyber Defense Skills with This 5-Course Bundle
TL;DR: This $19.99 cybersecurity bundle includes five courses and lifetime access to in-demand tools, techniques, and real-world training. For IT...
Dormakaba flaws allow to access major organizations’ doors
Dormakaba flaws allow to access major organizations’ doors Pierluigi Paganini January 27, 2026 Researchers found over 20 flaws in Dormakaba...
Who Approved This Agent? Rethinking Access, Accountability, and Risk in the Age of AI Agents
AI agents are accelerating how work gets done. They schedule meetings, access data, trigger workflows, write code, and take action...
Stateful Hash-Based Verification for Contextual Data Integrity
The Evolution of Database Access in the Machine Era Ever wonder why we still talk about database security like it's...
