The DocuSign Email That Wasn’t – A Three-Redirect Credential Harvest
TL;DR Attackers sent a convincing DocuSign notification with a “Review & Sign” button that chained through Google Maps redirects...
attackers
Stopping real-world attacks: Lessons for business leaders from the 2026 cyber frontline
The 2026 Sophos Active Adversary Report offers an evidence‑based look at how today’s attackers operate in real environments, drawing on...
Dynamic Objects in Active Directory: The Stealthy Threat
Active Directory’s “dynamic objects” feature offers attackers a perfect evasion cloak. These objects automatically self-destruct without a trace, so...
Facebook ads spread fake Windows 11 downloads that steal passwords and crypto wallets
Attackers are running paid Facebook ads that look like official Microsoft promotions, then directing users to near-perfect clones of...
Master XDR Investigations: A Deep Dive into the GravityZone XDR Demo Incident
An attacker’s initial access, whether through phishing, unmanaged devices, exploited vulnerabilities, or a compromised supply chain, marks the beginning...
.png?width=3196&height=457&name=Affirm-CTA-02%20(1).png "Context-Based Attestation: A Practical Approach to High-Confidence Identity Verification")
Context-Based Attestation: A Practical Approach to High-Confidence Identity Verification
From hiring and onboarding fraud to service desk social engineering, attackers increasingly exploit identity workflows with stolen identities, forged...
CVE-2026-1357: WordPress Plugin RCE Exposes Sites to Full Takeover
A critical vulnerability in the WPvivid Backup & Migration WordPress plugin allows unauthenticated attackers to upload and execute arbitrary PHP files...
A security flaw at DavaIndia Pharmacy allowed attackers to access customers’ data and more
A security flaw at DavaIndia Pharmacy allowed attackers to access customers’ data and more Pierluigi Paganini February 16, 2026 A...
Microsoft Discloses DNS-Based ClickFix Attack Using Nslookup for Malware Staging
Microsoft has disclosed details of a new version of the ClickFix social engineering tactic in which the attackers trick unsuspecting...
Attackers exploit BeyondTrust CVE-2026-1731 within hours of PoC release
Attackers exploit BeyondTrust CVE-2026-1731 within hours of PoC release Pierluigi Paganini February 13, 2026 Attackers quickly targeted BeyondTrust flaw CVE-2026-1731...
ZeroDayRAT spyware grants attackers total access to mobile devices
ZeroDayRAT spyware grants attackers total access to mobile devices Pierluigi Paganini February 10, 2026 ZeroDayRAT is a commercial mobile spyware...
Attackers abuse SolarWinds Web Help Desk to install Zoho agents and Velociraptor
Attackers abuse SolarWinds Web Help Desk to install Zoho agents and Velociraptor Pierluigi Paganini February 09, 2026 Huntress confirmed active...
Polymorphic Viruses: Why They’re Harder to Detect Every Year
Cyber threats rarely stand still. Attackers keep finding new ways to slip past defences, and the polymorphic computer virus is...
This Week in Scams: Dating App Breaches, TikTok Data, Grubhub Extortion
This week in scams, three headlines tell the same story: attackers are getting better at manipulating people, not just breaking into...
PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun
PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun Pierluigi Paganini January 28, 2026 Koi researchers found...
