Attack on Stryker’s Microsoft environment wiped employee devices without malware
Attack on Stryker’s Microsoft environment wiped employee devices without malware Pierluigi Paganini March 17, 2026 The recent cyberattack on Stryker...
attack
How SMBs Can Proactively Strengthen Cybersecurity
Cyber attackers increasingly target SMBs because they are often the easiest path into larger supply chains. As cyberattacks are...
When Proxies Become the Attack Vectors in Web Architectures
Many Reverse proxy attack vectors expose a flawed assumption in modern web architectures that backends can blindly trust security-critical...
Evil evolution: ClickFix and macOS infostealers
This campaign – use of a popular and up-to-date lure notwithstanding – has all the hallmarks of a ‘classic’ ClickFix...
Ericsson US confirms breach after third-party provider attack
Ericsson US confirms breach after third-party provider attack Pierluigi Paganini March 10, 2026 Ericsson US reports a data breach after...
Hackers Used New Exploit Kit to Compromise Thousands of iPhones
Image: cait00sith/Envato An iOS exploit framework has revealed how advanced mobile attack tools can move rapidly from surveillance operations to...
North Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for Cross-Platform RAT
Ravie LakshmananMar 02, 2026Supply Chain Attack / Malware Cybersecurity researchers have disclosed a new iteration of the ongoing Contagious Interview...
Iran Has One Card Left—It’s Pointed at Your Network
In light of today’s attack by the U.S. and Israel on Iran, it is prudent to ask: What can...
How vCISO Services Reduce Cyber Risk Without Increasing Costs?
Smaller organizations are increasingly under attack, with ransomware emerging as the dominant threat. According to the Verizon 2025 Data...
How to understand and avoid Advanced Persistent Threats
By definition, an advanced persistent threat (APT) is a prolonged, targeted attack on a specific victim with the intention to compromise...
What to Know About the Notepad++ Supply-Chain Attack
Blogs Blog In this post we examine the mechanics of the CVE-2025-15556 supply-chain attack and provide actionable steps to...
Untrusted repositories turn Claude code into an attack vector
Untrusted repositories turn Claude code into an attack vector Pierluigi Paganini February 25, 2026 Flaws in Anthropic’s Claude Code could...
From Exposure to Assurance: How CTEM and MITRE INFORM Enable Modern Cyber Defense
For large enterprises, cybersecurity has become a problem of scale, confidence, and accountability. Attack surfaces are expanding faster than...
Cline CLI 2.3.0 Supply Chain Attack Installed OpenClaw on Developer Systems
In yet another software supply chain attack, the open-source, artificial intelligence (AI)-powered coding assistant Cline CLI was updated to stealthily...
Germany’s national rail operator Deutsche Bahn hit by a DDoS attack
Germany’s national rail operator Deutsche Bahn hit by a DDoS attack Pierluigi Paganini February 19, 2026 Germany’s national rail operator,...
