Smashing Security podcast #460: Never knock on the door of a nuclear submarine base and ask for a selfie
A disgruntled data analyst decides that the best response to losing his contract is to steal the entire company payroll...
that
As the US Midterms Approach, AI Is Going to Emerge as a Key Issue Concerning Voters
In December, the Trump administration signed an executive order that neutered states’ ability to regulate AI by ordering his...
WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites
Ravie LakshmananMar 26, 2026Malware / Web Security Cybersecurity researchers have discovered a new payment skimmer that uses WebRTC data channels...
Vicarius Launches vIntelligence, a Second Flagship Product for Continuous Agentic Validation
Vicarius has announced vIntelligence, a second flagship product that adds continuous agentic validation to the company’s security portfolio. The...
Try our new dimensional analysis Claude plugin
We’re releasing a new Claude plugin for developing and auditing code that implements dimensional analysis, a technique we explored...
Meet Khaled Mohamed: the bug hunter who found a Microsoft flaw
It’s only on rare occasions that anyone pays attention to the acknowledgment section of a vulnerability disclosure. But for...
The Kill Chain Is Obsolete When Your AI Agent Is the Threat
In September 2025, Anthropic disclosed that a state-sponsored threat actor used an AI coding agent to execute an autonomous cyber...
Which Came First: The System Prompt, or the RCE?
During a recent penetration test, we came across an AI-powered desktop application that acted as a bridge between Claude...
Quantum-Hardened Granular Resource Authorization Policies
The big shift from Apple ID to Apple Account Ever wonder why that little button on your screen suddenly...
CSA and Aembit Survey: 68% of Organizations Can’t Distinguish AI Agent Actions from Human Activity
AI agents are already deployed broadly across enterprise environments. The problem is that organizations can’t tell what they’re doing....
Ghost Campaign Uses 7 npm Packages to Steal Crypto Wallets and Credentials
Cybersecurity researchers have uncovered a new set of malicious npm packages that are designed to steal cryptocurrency wallets and sensitive...
Armor Launches Dash to Give Boards and C-Suite a Direct, Unfiltered View of Cyber Risk
Armor launched Dash at RSAC 2026 Monday, an executive dashboard that pulls cybersecurity posture data directly from an organization’s...
Navia Data Breach Hits 2.7 Million People, Exposing Sensitive Personal Data
Image: Freepik Navia Benefit Solutions, a behind-the-scenes benefits administrator that handles accounts for more than 10,000 US employers, has confirmed...
⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More
Ravie LakshmananMar 23, 2026Cybersecurity / Hacking Another week, another reminder that the internet is still a mess. Systems people thought...
Microsoft Warns IRS Phishing Hits 29,000 Users, Deploys RMM Malware
Ravie LakshmananMar 23, 2026Email Security / Cloud Security Microsoft has warned of fresh campaigns that are capitalizing on the upcoming...
