Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD Secrets
Trivy, a popular open-source vulnerability scanner maintained by Aqua Security, was compromised a second time within the span of a...
Security
Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure
A critical security flaw impacting Langflow has come under active exploitation within 20 hours of public disclosure, highlighting the speed...
Apple Mail’s ‘Trusted Sender’ Label Misused in New Phishing Scheme
Image: Generated via Google’s Nano Banana A new phishing scam is raising concerns after reports showed that Apple Mail can...
6 Best Open Source Password Managers for Windows in 2026
This guide is for Windows users who prefer open-source solutions and want a clear, practical overview of the best open-source...
BSidesSLC 2025 – Getting Things Fixed – Keynote On Security Wins (And Fails)
Author, Creator & Presenter: Scott Piper – Principal Cloud Security Researcher at Wiz Our thanks to BSidesSLC for publishing...
Apple urges iPhone users to update as Coruna and DarkSword exploit kits emerge
Apple urges iPhone users to update as Coruna and DarkSword exploit kits emerge Pierluigi Paganini March 20, 2026 Apple warns...
Global law enforcement operation targets AISURU, Kimwolf, JackSkid botnet operators
Global law enforcement operation targets AISURU, Kimwolf, JackSkid botnet operators Pierluigi Paganini March 20, 2026 DoJ disrupted IoT botnets’ C2...
Magento PolyShell Flaw Enables Unauthenticated Uploads, RCE and Account Takeover
Ravie LakshmananMar 20, 2026Web Security / Vulnerability Sansec is warning of a critical security flaw in Magento's REST API that...
Apple Warns Older iPhones Vulnerable to Coruna, DarkSword Exploit Kit Attacks
Ravie LakshmananMar 20, 2026Mobile Security / Malware Apple is urging users who are still running an outdated version of iOS...
French aircraft carrier Charles de Gaulle tracked via Strava activity in OPSEC failure
French aircraft carrier Charles de Gaulle tracked via Strava activity in OPSEC failure Pierluigi Paganini March 20, 2026 A French...
Critical Ubiquiti UniFi UniFi security flaw allows potential account hijacking
Critical Ubiquiti UniFi UniFi security flaw allows potential account hijacking Pierluigi Paganini March 19, 2026 Ubiquiti fixed two UniFi vulnerabilities,...
Sonatype Discovers Two Malicious npm Packages
Sonatype Security Research has identified a potential compromise of a trusted npm maintainer account that has now published two...
U.S. CISA adds a flaw in Cisco FMC and Cisco SCC Firewall Management to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a flaw in Cisco FMC and Cisco SCC Firewall Management to its Known Exploited Vulnerabilities catalog Pierluigi...
Russian APT targets Ukraine via Zimbra XSS flaw CVE-2025-66376
Russian APT targets Ukraine via Zimbra XSS flaw CVE-2025-66376 Pierluigi Paganini March 19, 2026 Russian APT exploits a critical XSS...
DarkSword emerges as powerful iOS exploit tool in global attacks
DarkSword emerges as powerful iOS exploit tool in global attacks Pierluigi Paganini March 19, 2026 DarkSword, a new iOS exploit...
