From Generic Code to Specialist AI: How MCP Will Reshape the Developer Experience
One of the challenges with using AI and LLMs to generate code today is that they mostly produce generic code....
with
F5 BIG-IP Breach: 44 CVEs That Need Your Attention Now
Partnering with an EDR vendor after a nation-state has already stolen your source code isn’t innovation — it’s a gamble....
North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart Contracts
Oct 16, 2025Ravie LakshmananMalware / Blockchain A threat actor with ties to the Democratic People's Republic of Korea (aka North...
Architectures, Risks, and Adoption: How to Assess and Choose the Right AI-SOC Platform
Scaling the SOC with AI - Why now? Security Operations Centers (SOCs) are under unprecedented pressure. According to SACR's AI-SOC...
NDSS 2025 – MADWeb 2025, Session 1: Network Meets The Web
Workshop on Measurements, Attacks, and Defenses for the Web (MADWeb) 2025, co-located with the Network and Distributed System Security (NDSS)...
Microsoft accused of trying to manipulate AI pricing via its OpenAI investment
“If I was an enterprise CIO, the only immediate action is, if we are considering working with either of these...
AI Cyber Attacks – Channel 10 News
AI Cyber Attacks I had the pleasure of speaking with Channel 10 recently about one of the most pressing topics...
200,000 Linux systems from Framework are shipped with signed UEFI components vulnerable to Secure Boot bypass
200,000 Linux systems from Framework are shipped with signed UEFI components vulnerable to Secure Boot bypass Pierluigi Paganini October 15,...
Chinese Threat Group ‘Jewelbug’ Quietly Infiltrated Russian IT Network for Months
A threat actor with ties to China has been attributed to a five-month-long intrusion targeting a Russian IT service provider,...
The LLM Dependency Trap
Large language models are reshaping how we write software. With a few prompts, developers can generate boilerplate, integrate dependencies, write...
Chinese Hackers Exploit ArcGIS Server as Backdoor for Over a Year
Oct 14, 2025Ravie LakshmananCyber Espionage / Network Security Threat actors with ties to China have been attributed to a novel...
Unsupported OpenJDK in Financial Systems: Hidden Risks
Summary Financial institutions using Java can remain compliant with the EU’s DORA security framework with a secure, supported and stable...
UK NCSC Reports 429 cyberattacks in a year, with nationally significant cases more than doubling
UK NCSC Reports 429 cyberattacks in a year, with nationally significant cases more than doubling Pierluigi Paganini October 14, 2025...
The Psychology of Security: Why Users Resist Better Authentication
Understanding the Human Mind Behind the 70% Who Feel Overwhelmed by Password Management Let me start with a story that...
Exposure Management Beyond The Endpoint
Relying on an endpoint-centric approach to exposure management can leave you with blind spots that increase risk. You need to...
