SolarWinds patches four critical Serv-U flaws enabling root access
SolarWinds patches four critical Serv-U flaws enabling root access Pierluigi Paganini February 24, 2026 SolarWinds addressed four critical Serv-U vulnerabilities...
access
Romanian hacker pleads guilty to selling access to Oregon state networks
Romanian hacker pleads guilty to selling access to Oregon state networks Pierluigi Paganini February 23, 2026 A Romanian man pleaded...
Beyond Remediation: How Mitigation Controls Close the Gap in Segregation of Duties Compliance
Managing Segregation of Duties risk doesn’t always mean removing access. Sometimes, the smarter path is monitoring the risk you’ve...
CVE-2026-1731 fuels ongoing attacks on BeyondTrust remote access products
CVE-2026-1731 fuels ongoing attacks on BeyondTrust remote access products Pierluigi Paganini February 23, 2026 Attackers are exploiting CVE-2026-1731 in BeyondTrust...
PromptSpy abuses Gemini AI to gain persistent access on Android
PromptSpy abuses Gemini AI to gain persistent access on Android Pierluigi Paganini February 20, 2026 PromptSpy is the first Android...
French Ministry confirms data access to 1.2 Million bank accounts
French Ministry confirms data access to 1.2 Million bank accounts Pierluigi Paganini February 18, 2026 A hacker accessed data from...
Master XDR Investigations: A Deep Dive into the GravityZone XDR Demo Incident
An attacker’s initial access, whether through phishing, unmanaged devices, exploited vulnerabilities, or a compromised supply chain, marks the beginning...
A security flaw at DavaIndia Pharmacy allowed attackers to access customers’ data and more
A security flaw at DavaIndia Pharmacy allowed attackers to access customers’ data and more Pierluigi Paganini February 16, 2026 A...
2026: When Every AI Agent Becomes a SOX Risk
Boards have spent years asking if people have too much access. In 2026, the harder question is whether your...
Microsoft Patches Windows Flaw Causing VPN Disruptions
Image: AndersonPiza/Envato Microsoft has patched a vulnerability in the Windows Remote Access Connection Manager (RasMan) service that was being exploited...
TA584 threat actor leverages Tsundere Bot and XWorm for network access
A prolific initial access broker, identified as TA584, has been observed employing the Tsundere Bot in conjunction with the XWorm...
ZeroDayRAT spyware grants attackers total access to mobile devices
ZeroDayRAT spyware grants attackers total access to mobile devices Pierluigi Paganini February 10, 2026 ZeroDayRAT is a commercial mobile spyware...
Versa SASE Platform Now Prevents Sensitive Data From Being Shared With AI
Versa has added the ability to analyze text to its security access service edge (SASE) platform to make it...
Agentic AI and Non‑Human Identities Demand a Paradigm Shift In Security: Lessons from NHIcon 2026
In the race to innovate, software has repeatedly reinvented how we define identity, trust, and access. In the 1990's, the...
Build Practical Cyber Defense Skills with This 5-Course Bundle
TL;DR: This $19.99 cybersecurity bundle includes five courses and lifetime access to in-demand tools, techniques, and real-world training. For IT...
