DAST vs AI Code: Why Dynamic Application Security Testing Can’t Keep Pace
Traditional DAST requires 8+ hours for comprehensive scanning while AI-generated code deploys 10 times daily. This speed mismatch creates...
code
The Security-Convenience Tradeoff in Authentication: Are We Finally Solving It?
If you’ve ever rolled your eyes at yet another “enter the code we sent to your phone” notification, you’ve felt...
A critical WatchGuard Fireware flaw could allow unauthenticated code execution
A critical WatchGuard Fireware flaw could allow unauthenticated code execution Pierluigi Paganini October 17, 2025 A critical WatchGuard Fireware vulnerability,...
From Generic Code to Specialist AI: How MCP Will Reshape the Developer Experience
One of the challenges with using AI and LLMs to generate code today is that they mostly produce generic code....
F5 BIG-IP Breach: 44 CVEs That Need Your Attention Now
Partnering with an EDR vendor after a nation-state has already stolen your source code isn’t innovation — it’s a gamble....
A sophisticated nation-state actor breached F5 systems, stealing BIG-IP source code and data on undisclosed flaw
A sophisticated nation-state actor breached F5 systems, stealing BIG-IP source code and data on undisclosed flaw Pierluigi Paganini October 15,...
Over 100 VS Code Extensions Exposed Developers to Hidden Supply Chain Risks
New research has uncovered that publishers of over 100 Visual Studio Code (VS Code) extensions leaked access tokens that could...
Hackers Behind the Code – Podcast
Hackers Behind the Code I recently had the privilege of being a guest on the “Hackers Behind the Code” podcast,...
Redis patches 13-Year-Old Lua flaw enabling Remote Code Execution
Redis patches 13-Year-Old Lua flaw enabling Remote Code Execution Pierluigi Paganini October 08, 2025 Redis warns of CVE-2025-49844, a Lua...
Self-Replicating Worm Hits 180+ Software Packages
At least 187 code packages made available through the JavaScript repository NPM have been infected with a self-replicating worm that...
Cursor AI Code Editor Flaw Enables Silent Code Execution via Malicious Repositories
A security weakness has been disclosed in the artificial intelligence (AI)-powered code editor Cursor that could trigger code execution when...
EvilAI Operators Use AI-Generated Code and Fake Apps for Far-Reaching Attacks
EvilAI Operators Use AI-Generated Code and Fake Apps for Far-Reaching Attacks | Trend Micro (US) Content has been added to...
18 Popular Code Packages Hacked, Rigged to Steal Crypto
At least 18 popular JavaScript code packages that are collectively downloaded more than two billion times each week were briefly...
The Trojan Sysadmin: How I Got an AI to Build a Wolf in Sheep’s Clothing
There’s been endless debate about whether AI can churn out malicious code — or if it’s too principled to cross...
CVE-2025-4427, CVE-2025-4428: Ivanti Endpoint Manager Mobile (EPMM) Remote Code Execution
Remote code execution vulnerability in a popular mobile device management solution from Ivanti has been exploited in the wild in...
