CrystalX RAT: new MaaS malware combines spyware, stealer, and remote access
CrystalX RAT: new MaaS malware combines spyware, stealer, and remote access Pierluigi Paganini April 03, 2026 CrystalX RAT, a new...
Security
Randall Munroe’s XKCD ‘Amperage’
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink *** This is a Security...
Android Alert: 50 Google Play Apps Linked to ‘NoVoice’ Malware Reached 2.3M Downloads
Image: Luis Andrés Villalón Vega/Unsplash Hackers didn’t sneak past Google Play’s defenses. They walked right through the front door. Downloaded...
FBI Declares Surveillance System Breach a ‘Major Incident’
Image: Kim Raff/NYT/Redux The Federal Bureau of Investigation has formally classified a China-linked breach of one of its internal surveillance...
AI Breakthroughs, Security Breaches, and Industry Shakeups Define the Week in Tech
Image created with ChatGPT From record AI funding and multimodal model launches to malware campaigns, robotaxi failures, and fresh waves...
Board-Ready Security Metrics That Actually Matter
TL;DR Board-ready security metrics translate technical capabilities into financial risk and business outcomes. Boards need visibility across three dimensions:...
Pro-Iran Handala group breached Israeli defence contractor PSK Wind Technologies
Pro-Iran Handala group breached Israeli defence contractor PSK Wind Technologies Pierluigi Paganini April 03, 2026 Iran-linked hackers claim to have...
New SparkCat Variant in iOS, Android Apps Steals Crypto Wallet Recovery Phrase Images
Ravie LakshmananApr 03, 2026Mobile Security / Threat Intelligence Cybersecurity researchers have discovered a new version of the SparkCat malware on the Apple...
Patch Now: Chrome Flaw Under Active Attack, Google Confirms
Image: sergign/Envato Elements Chrome just became the latest battlefield in an ongoing war over memory safety. Google has pushed an...
Google Workspace’s continuous approach to mitigating indirect prompt injections
Posted by Adam Gavish, Google GenAI Security TeamIndirect prompt injection (IPI) is an evolving threat vector targeting users of complex...
The SOC Analyst Was Never Meant to Be a Ticket Processor. Autonomous Triage Proves It.
The average enterprise SOC receives over 4,400 security alerts per day. Each one takes approximately 70 minutes to investigate...
5 Questions That Expose Whether an “Agentic SOC” Actually Works in Production
At RSA Conference 2026, “agentic SOC” was everywhere. Google Security Operations. Cisco. Dropzone AI. Stellar Cyber. ReliaQuest. Every major...
Hasbro hit by cyberattack, investigates possible data breach
Hasbro hit by cyberattack, investigates possible data breach Pierluigi Paganini April 02, 2026 Hasbro suffers a cyberattack, disrupting some operations;...
Cisco fixed critical and high-severity flaws
Cisco fixed critical and high-severity flaws Pierluigi Paganini April 02, 2026 Cisco fixed critical flaws that could allow attackers to...
Threat actor UAC-0255 impersonate CERT-UA to spread AGEWHEEZE malware via phishing
Threat actor UAC-0255 impersonate CERT-UA to spread AGEWHEEZE malware via phishing Pierluigi Paganini April 02, 2026 Threat actors impersonated CERT-UA...
