U.S. CISA adds an Aquasecurity Trivy flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds an Aquasecurity Trivy flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini March 27, 2026 The U.S....
Security
LangChain, LangGraph Flaws Expose Files, Secrets, Databases in Widely Used AI Frameworks
Ravie LakshmananMar 27, 2026Vulnerability / Artificial Intelligence Cybersecurity researchers have disclosed three security vulnerabilities impacting LangChain and LangGraph that, if...
The 3 Security KPIs That Cut Through Alert Noise
TL;DR Three application security KPIs cut through alert noise to reveal actual risk: viable attack count, vulnerability escape rate...
China-linked Red Menshen APT deploys stealthy BPFDoor implants in telecom networks
China-linked Red Menshen APT deploys stealthy BPFDoor implants in telecom networks Pierluigi Paganini March 27, 2026 China-linked Red Menshen APT...
U.S. CISA adds a Langflow flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a Langflow flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini March 26, 2026 The U.S. Cybersecurity...
Coruna exploit reveals evolution of Triangulation iOS exploitation framework
Coruna exploit reveals evolution of Triangulation iOS exploitation framework Pierluigi Paganini March 26, 2026 Kaspersky found Coruna iOS exploits reuse...
BPFdoor in Telecom Networks: The FCC Is Securing the Edge, but China’s Hackers Are Already Past It
Rapid7’s research reveals China-linked kernel implants deep inside telecom signaling infrastructure. Here’s what BPFdoor is, how it evolved, and...
Millions of UK iPhone Users Will Need to Verify Their Age — Here’s Why
Image: borodai/Envato Elements Apple is quietly changing how iPhones work for millions of users in the United Kingdom. The company...
Microsoft 365 Under Siege: Phishing Campaign Bypasses MFA Across 5 Countries
Image: Huntress More than 340 organizations across five countries have been caught in a sophisticated phishing campaign that weaponizes a...
TP-Link Fixes Bug That Lets Hackers Take Over Routers Without a Password
Image: User Pascal/Unsplash TP-Link just patched a flaw that let attackers push rogue firmware onto your router without a password....
The Next Billion Users Won’t Be Human: Securing the Agentic Enterprise
image: envato by Rawpixel For decades, the “user” at the heart of enterprise security has been a person. We built...
Researchers uncover WebRTC skimmer bypassing traditional defenses
Researchers uncover WebRTC skimmer bypassing traditional defenses Pierluigi Paganini March 26, 2026 Researchers found a new skimmer using WebRTC to...
Russian authorities arrest alleged LeakBase admin behind stolen data marketplace
Russian authorities arrest alleged LeakBase admin behind stolen data marketplace Pierluigi Paganini March 26, 2026 Russian authorities arrested the alleged...
![[Webinar] Stop Guessing. Learn to Validate Your Defenses Against Real Attacks](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCypzkb6uvHuNx6LKknUqtvQFoqsr6aalztDeBKT1aaUASzfjZMZAZqExx1k0w5iKWl08lx3MxbM_FwWxAvBdZODEerioaMp8OHVvhSjC8VL3uAW9_NMniMl_niggBVhVMdDFu2324YyhW5TrK4fua1PXlrb0DweOULvNgi5mlQUZUct_dIX3OePrfqks/s1600/validate.jpg)
[Webinar] Stop Guessing. Learn to Validate Your Defenses Against Real Attacks
The Hacker NewsMar 26, 2026Security Testing / Security Automation Most teams have security tools in place. Alerts are firing, dashboards...
Coruna iOS Kit Reuses 2023 Triangulation Exploit Code in New Mass Attacks
Ravie LakshmananMar 26, 2026Malware / Mobile Security The kernel exploit for two security vulnerabilities used in the recently uncovered Apple...
