Smashing Security podcast #451: I hacked the government, and your headphones are next
In episode 451 of “Smashing Security,” we meet the cybercriminal who hacked the US Supreme Court, Veterans Affairs, and more...
Security
Can AI manage cloud security effectively?
How Can AI Revolutionize Cloud Security Management? How do organizations ensure that their cloud environments are not just secure but...
ACME flaw in Cloudflare allowed attackers to reach origin servers
ACME flaw in Cloudflare allowed attackers to reach origin servers Pierluigi Paganini January 21, 2026 Cloudflare fixed a flaw in...
The AI Security Maturity Model for AI-First Development Teams
The AI Security Maturity Model for AI-First Development Teams A framework for evolving from reactive cleanup to proactive AI governance & protection ...
Zoom and GitLab Release Security Updates Fixing RCE, DoS, and 2FA Bypass Flaws
Ravie LakshmananJan 21, 2026Vulnerability / Network Security Zoom and GitLab have released security updates to resolve a number of security...
Pro-Russian denial-of-service attacks target UK, NCSC warns
The UK's National Cyber Security Centre (NCSC) has issued a warning about the threat posed by distributed denial-of-service (DDoS) attacks...
Webinar: How Smart MSSPs Using AI to Boost Margins with Half the Staff
The Hacker NewsJan 21, 2026Artificial Intelligence / Automation Every managed security provider is chasing the same problem in 2026 —...
EU’s New Cybersecurity Act Could Ban High-Risk Suppliers
Image generated by Google Gemini The European Commission has dropped an ambitious cybersecurity proposal, targeting “high-risk” suppliers while promising faster...
LastPass Warns of Fake Maintenance Messages Targeting Users’ Master Passwords
Ravie LakshmananJan 21, 2026Email Security / Malware LastPass is alerting users to a new active phishing campaign that's impersonating the...
CERT/CC Warns binary-parser Bug Allows Node.js Privilege-Level Code Execution
Ravie LakshmananJan 21, 2026Open Source / Vulnerability A security vulnerability has been disclosed in the popular binary-parser npm library that,...
Old habits die hard: 2025’s most common passwords were as predictable as ever
Digital Security Once again, data shows an uncomfortable truth: the habit of choosing eminently hackable passwords is alive and well...
New iOS and iPadOS Flaws Leave Millions of iPhones at Risk
Image: Amanz/Unsplash No clicks. No warnings. Full device access. Apple confirmed two critical WebKit vulnerabilities affecting millions of iPhones and...
Critical TP-Link VIGI camera flaw allowed remote takeover of surveillance systems
Critical TP-Link VIGI camera flaw allowed remote takeover of surveillance systems Pierluigi Paganini January 20, 2026 TP-Link fixed a critical...
Three Flaws in Anthropic MCP Git Server Enable File Access and Code Execution
Ravie LakshmananJan 20, 2026Vulnerability / Artificial Intelligence A set of three security vulnerabilities has been disclosed in mcp-server-git, the official...
The Hidden Risk of Orphan Accounts
The Hacker NewsJan 20, 2026Enterprise Security / AI Security The Problem: The Identities Left Behind As organizations grow and evolve,...
