Critical SQL Injection bug in Ally plugin threatens 400,000+ WordPress sites
Critical SQL Injection bug in Ally plugin threatens 400,000+ WordPress sites Pierluigi Paganini March 12, 2026 An unauthenticated SQL injection...
Security
ThreatsDay Bulletin: OAuth Trap, EDR Killer, Signal Phishing, Zombie ZIP, AI Platform Hack & More
Ravie LakshmananMar 12, 2026Cybersecurity / Hacking News Another Thursday, another pile of weird security stuff that somehow happened in just...
Iran-Linked Hacktivists Hit Stryker, Knocking Employees Offline Across Multiple Countries
Image: przemekklos/Envato A cyberattack has disrupted global operations at medical technology manufacturer Stryker, forcing employees in multiple countries offline and...
Meta Rolls Out New Scam Alerts Across Facebook, WhatsApp, and Messenger
Image: Mariia Shalabaieva/Unsplash Meta is significantly expanding its anti-scam arsenal across Facebook, Messenger, and WhatsApp, introducing a suite of AI-powered...
Post-Quantum Cryptography for Authentication: The Enterprise Migration Guide 2026
Imagine a classified government file, encrypted today with RSA-2048, containing diplomatic communications that will remain sensitive for the next...
ENISA Technical Advisory on Secure Package Managers: Essential DevSecOps Guidance
ENISA Technical Advisory on Secure Package Managers: Essential DevSecOps Guidance Pierluigi Paganini March 12, 2026 ENISA’s first Technical Advisory on...
U.S. CISA adds a flaw in n8n to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a flaw in n8n to its Known Exploited Vulnerabilities catalog Pierluigi Paganini March 12, 2026 The U.S....
Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit
Ravie LakshmananMar 12, 2026Vulnerability / Malware Apple on Wednesday backported fixes for a security flaw in iOS, iPadOS, and macOS...
Bell Ambulance data breach impacted over 238,000 people
Bell Ambulance data breach impacted over 238,000 people Pierluigi Paganini March 12, 2026 Bell Ambulance confirms a February 2025 breach...
CISA Flags Actively Exploited n8n RCE Bug as 24,700 Instances Remain Exposed
Ravie LakshmananMar 12, 2026Vulnerability / Enterprise Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical...
Pro-Palestinian hacktivist group Handala targets Stryker in global disruption
Pro-Palestinian hacktivist group Handala targets Stryker in global disruption Pierluigi Paganini March 11, 2026 Pro-Palestinian hacktivist group Handala claims a...
BeatBanker malware targets Android users with banking Trojan and crypto miner
BeatBanker malware targets Android users with banking Trojan and crypto miner Pierluigi Paganini March 11, 2026 BeatBanker Android malware spreads...
Smashing Security podcast #458: How not to steal $46 million from the US government
A Wikipedia security engineer accidentally wakes a dormant JavaScript worm that hadn’t stirred since 2024 – and within minutes, giant...
Post-Quantum Decentralized Policy Enforcement Points in MCP Node Clusters
The Quantum Vulnerability of Centralized MCP Architectures Ever wonder why we're still building ai security like it’s 2010? We...
Are DevOps teams supported by automated configurations
How Can DevOps Teams Enhance Security with Automated Configurations? What are some of the biggest security challenges facing DevOps...
