Why East-West Visibility Matters for Grid Security
Electric power infrastructure is becoming more connected than ever before. Organizations responsible for operating the Bulk Electric System (BES) are...
before
Russia-linked APT28 exploited MSHTML zero-day CVE-2026-21513 before patch
Russia-linked APT28 exploited MSHTML zero-day CVE-2026-21513 before patch Pierluigi Paganini March 02, 2026 Russia-linked APT28 reportedly exploited MSHTML zero-day CVE-2026-21513...
Beyond the CLI: 5 Governance Questions Every CISO Must Ask Before Deploying Claude Code
Beyond the CLI: 5 Governance Questions Every CISO Must Ask Before Deploying Claude Code As CISOs, we’ve spent the last...
Using threat modeling and prompt injection to audit Comet
Before launching their Comet browser, Perplexity hired us to test the security of their AI-powered browsing features. Using adversarial...
From Exposure to Exploitation: How AI Collapses Your Response Window
We’ve all seen this before: a developer deploys a new cloud workload and grants overly broad permissions just to keep...
Microsoft’s Patch Tuesday updates: Keeping up with the latest fixes
Long before Taco Tuesday became part of the pop-culture vernacular, Tuesdays were synonymous with security — and for anyone in...
Reynolds ransomware uses BYOVD to disable security before encryption
Reynolds ransomware uses BYOVD to disable security before encryption Pierluigi Paganini February 11, 2026 Researchers discovered Reynolds ransomware, which uses...
Hackers abused React Native CLI flaw to deploy Rust malware before public disclosure
Hackers abused React Native CLI flaw to deploy Rust malware before public disclosure Pierluigi Paganini February 03, 2026 Hackers exploit...
He Who Controls the Key Controls the World – Microsoft “Often” Provides BitLocker Keys to Law Enforcement
Before heading off to battle, King Arthur gives Lancelot the key to Guinevere’s chastity belt with solemn instructions: If Arthur...
We’ve Reached the “Customers Want Security” Stage, and AI Is Listening
I’ve seen this movie before. That’s why a recent LinkedIn post by Ilya Kabanov stopped me mid-doomscroll. Kabanov described how...
