Shai-hulud 2.0 Campaign Targets Cloud and Developer Ecosystems
Key takeaways: Shai-hulud 2.0 continues the first variant’s credential theft by stealing credentials and secrets from major cloud platforms as...
first
For the first time, a RomCom payload has been observed being distributed via SocGholish
For the first time, a RomCom payload has been observed being distributed via SocGholish Pierluigi Paganini November 26, 2025 RomCom...
Trust Beyond Containers: Identity and Agent Security Lessons from KubeCon 2025
Before Atlanta was named Atlanta, it was called "Termius". That first name is derived from the Western & Atlantic...
Beyond Pay-Per-Crawl: How to Turn AI Agent Traffic Into Revenue
“Pay-per-crawl” addressed the first wave of LLM crawlers scraping content to train models. But the landscape has already shifted...
Anthropic: China-backed hackers launch first large-scale autonomous AI cyberattack
Anthropic: China-backed hackers launch first large-scale autonomous AI cyberattack Pierluigi Paganini November 16, 2025 China-linked actors used Anthropic’s AI to...
Infostealers: The silent doorway to identity attacks — and why proactive defense matters
Credential theft isn’t just an inconvenience. It’s often the first move in a chain reaction that ends in full-scale compromise. ...
Queen City Con 0x3: Hacking And Embracing Resiliency
Cincinnati holds the distinction of being the first in the United States to establish a municipal fire department in...
I’m Hosting a New Podcast
I'm hosting a new podcast for Corelight. Check out my first episode with our field CTO, Vince Stoffer. Expect new...
Is Your Google Workspace as Secure as You Think it is?
The New Reality for Lean Security Teams If you're the first security or IT hire at a fast-growing startup, you've...
How Proxy Servers Enhance Security in Modern Authentication Systems
Modern digital environments rely on authentication systems as the first line of defense between users and sensitive data. Yet,...
Text Detection and Extraction From Images Using OCR in Python
When you get a scanned file or a screenshot that has text, it looks fine at first. But the problem...
Red Pilling of Politics – Court Strikes Down California Law on Political Deepfakes
In The Matrix, (the first Matrix) Morpheus tells Neo, “You have to understand, most of these people are not ready...
The First Malicious MCP Server is a Warning Shot for AI Cybersecurity
The first malicious Model Context Protocol (MCP) server has been discovered and we should all be worried how this is...
Roll your own bot detection: fingerprinting/JavaScript (part 1)
This is the first article in a two-part series where we show how to build your own anti-bot system to...
The Evolving Role of the CSO: From Technical Guardian to Business Strategist
When I first entered the world of cybersecurity, the role of chief security officer (CSO) was often relegated to the...
