U.S. Defense Manufacturer IEH Hit by Phishing Attack, Exposing Potentially Export-Controlled Data Pierluigi Paganini August 09, 2026 IEH was breached by a phishing attack that…
After more than 300,000 production penetration tests (pentests), our company has learned something that may surprise people watching the recent wave of autonomous security announcements.…
Bill Swearingen has spent the past year running largely the same test, over and over again. The goal was to produce a computer-generated pattern that…
In cloud-native environments, the security of your code repositories and development pipelines is critical. The 2025 State of Code Security Report sheds light on the…
A new class of email-based attacks that exploit ordinary CSS styling code to hijack webmail interfaces, spy on user activity, and even steal passwords in…
Microsoft Threat Intelligence has identified a new ransomware campaign attributed to the financially motivated threat actor Storm-1175 that began deploying a previously undocumented ransomware strain,…
Swati KhandelwalAug 07, 2026Linux / Vulnerability A use-after-free bug in Linux’s SCTP networking code can be turned into full root on a host, and Tencent…
Security Affairs newsletter Round 589 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini August 09, 2026 A new round of the weekly Security Affairs newsletter…
Cybersecurity is full of frameworks, regulations, and directives that tell organizations what they should do. Zero Trust, NIST, CIS Controls, CMMC, DORA, NIS2, and now…
We’re thrilled to announce that Wiz has been named the #1 Cloud Detection and Response (CDR) solution in G2’s Winter 2025 CDR Grid Report. Based…
An indirect prompt injection vulnerability in Claude on Chrome can be exploited to steal email verification codes and hijack accounts on platforms like Slack, X, and Claude.ai.…
A large-scale supply chain attack has hit the npm registry, with a suspected Russian threat actor publishing more than 700 malicious packages in just 48…
