Attackers exploit FortiGate devices to access sensitive network information
Attackers exploit FortiGate devices to access sensitive network information Pierluigi Paganini March 10, 2026 Attackers are exploiting FortiGate devices to...
access
Anomalous Prompt Injection Detection in Quantum-Secured AI Pipelines
The basics of identity and access management Ever felt like you're drowning in a sea of passwords just to...
How AI Assistants are Moving the Security Goalposts
AI-based assistants or “agents” — autonomous programs that have access to the user’s computer, files, online services and can automate...
How AI Assistants are Moving the Security Goalposts
AI-based assistants or “agents” — autonomous programs that have access to the user’s computer, files, online services and can...
Okta vs Microsoft Entra ID: Which Enterprise SSO Platform Is Better?
Enterprise organizations rely on identity providers to manage authentication, secure access to applications, and automate identity lifecycle management. Two...
OpenClaw Security Risk: OAuth and SaaS Identity
OpenClaw runs on an employee’s machine. But the access it creates lives inside Slack, Salesforce, Google Workspace, GitHub, and...
SolarWinds patches four critical Serv-U flaws enabling root access
SolarWinds patches four critical Serv-U flaws enabling root access Pierluigi Paganini February 24, 2026 SolarWinds addressed four critical Serv-U vulnerabilities...
Romanian hacker pleads guilty to selling access to Oregon state networks
Romanian hacker pleads guilty to selling access to Oregon state networks Pierluigi Paganini February 23, 2026 A Romanian man pleaded...
Beyond Remediation: How Mitigation Controls Close the Gap in Segregation of Duties Compliance
Managing Segregation of Duties risk doesn’t always mean removing access. Sometimes, the smarter path is monitoring the risk you’ve...
CVE-2026-1731 fuels ongoing attacks on BeyondTrust remote access products
CVE-2026-1731 fuels ongoing attacks on BeyondTrust remote access products Pierluigi Paganini February 23, 2026 Attackers are exploiting CVE-2026-1731 in BeyondTrust...
PromptSpy abuses Gemini AI to gain persistent access on Android
PromptSpy abuses Gemini AI to gain persistent access on Android Pierluigi Paganini February 20, 2026 PromptSpy is the first Android...
French Ministry confirms data access to 1.2 Million bank accounts
French Ministry confirms data access to 1.2 Million bank accounts Pierluigi Paganini February 18, 2026 A hacker accessed data from...
Master XDR Investigations: A Deep Dive into the GravityZone XDR Demo Incident
An attacker’s initial access, whether through phishing, unmanaged devices, exploited vulnerabilities, or a compromised supply chain, marks the beginning...
A security flaw at DavaIndia Pharmacy allowed attackers to access customers’ data and more
A security flaw at DavaIndia Pharmacy allowed attackers to access customers’ data and more Pierluigi Paganini February 16, 2026 A...
2026: When Every AI Agent Becomes a SOX Risk
Boards have spent years asking if people have too much access. In 2026, the harder question is whether your...
