Can Your NHIs Withstand a Cyber Attack?
Are You Optimizing Your NHIs for Cyber Attack Resilience? When faced with the myriad challenges of cybersecurity, have you...
attack
AI chat privacy at risk: Microsoft details Whisper Leak side-channel attack
AI chat privacy at risk: Microsoft details Whisper Leak side-channel attack Pierluigi Paganini November 09, 2025 Microsoft uncovered Whisper Leak,...
Microsoft Uncovers ‘Whisper Leak’ Attack That Identifies AI Chat Topics in Encrypted Traffic
Microsoft has disclosed details of a novel side-channel attack targeting remote language models that could enable a passive adversary with...
From Log4j to IIS, China’s Hackers Turn Legacy Bugs into Global Espionage Tools
A China-linked threat actor has been attributed to a cyber attack targeting an U.S. non-profit organization with an aim to...
Hidden Logic Bombs in Malware-Laced NuGet Packages Set to Detonate Years After Installation
Nov 07, 2025Ravie LakshmananSupply Chain Attack / Malware A set of nine malicious NuGet packages has been identified as capable...
Cisco became aware of a new attack variant against Secure Firewall ASA and FTD devices
Cisco became aware of a new attack variant against Secure Firewall ASA and FTD devices Pierluigi Paganini November 06, 2025...
Cisco Warns of New Firewall Attack Exploiting CVE-2025-20333 and CVE-2025-20362
Nov 06, 2025Ravie LakshmananZero-Day / Vulnerability Cisco on Wednesday disclosed that it became aware of a new attack variant that's...
Smashing Security podcast #442: The hack that messed with time, and rogue ransom where negotiators
Time itself comes under attack as a state-backed hacking gang spends two years tunnelling toward a nation’s master clock —...
HackedGPT: Novel AI Vulnerabilities Open the Door for Private Data Leakage
Tenable Research has discovered seven vulnerabilities and attack techniques in ChatGPT, including unique indirect prompt injections, exfiltration of personal...
Tidal Cyber Launches NARC: The First Automated AI Engine to Extract Adversary Procedures for Threat-Led Defense
Tidal Cyber is proud to announce the release of NARC AI (Natural Attack Reading and Comprehension), the first AI...
Russian Rosselkhoznadzor hit by DDoS attack, food shipments across Russia delayed
Russian Rosselkhoznadzor hit by DDoS attack, food shipments across Russia delayed Pierluigi Paganini October 25, 2025 A DDoS attack on...
CVE-2025-59287: Microsoft fixes critical WSUS flaw under active attack
CVE-2025-59287: Microsoft fixes critical WSUS flaw under active attack Pierluigi Paganini October 25, 2025 Microsoft released urgent updates to address...
How to detect disposable email domains without relying on 3rd party APIs and lists
To scale a fraud or bot attack, adversaries need more than just realistic automation. They need infrastructure. A convincing...
Japanese retailer Muji halted online sales after a ransomware attack on logistics partner
Japanese retailer Muji halted online sales after a ransomware attack on logistics partner Pierluigi Paganini October 21, 2025 Muji halted...
CVE-2025-11371: Unpatched zero-day in Gladinet CentreStack, Triofox under attack
CVE-2025-11371: Unpatched zero-day in Gladinet CentreStack, Triofox under attack Pierluigi Paganini October 11, 2025 Threat actors are exploiting a zero-day,...
