Zero-Days Are Only Part of the Problem
The browser is the operating environment for modern work — it’s where employees access email, SaaS applications, collaboration tools, HR […]
Swimming Pools, Pee, and Trying to Delete Your Data From the Internet
I can’t recall if someone else originally came up with this saying or if I said it in some off-the-cuff
Code Injection in Perforce Helix Core (CVE-2026-6902)
Executive Summary In this article, we disclose our latest findings we made on Perforce protocol P4 (Helix Core) between command line client and server, and reveal how a threat actor could leverage it to conduct attacks.Â
Comment to the California State Bar on AI-related proposed ethics rule changes
Photo by Markus Winkler / Unsplash I submitted a comment to the California State Bar’s Standing Committee on Professional Responsibility
Why Social Engineering Attacks Are Successful… And How To Protect Against Them
02 Jul Why Social Engineering Attacks Are Successful… And How To Protect Against Them Posted at 09:17h in Blogs by
Iran-Nexus TAG-182 Disseminates MarkiRAT Surveillance Tool
Executive Summary Insikt Group has identified new infrastructure associated with the TAG-182 threat cluster, used to disseminate MarkiRAT malware in
Polymarket can predict the future. So how did it miss this hack? • Graham Cluley
QUENTYN TAYLOR Well, permanent means permanent. GRAHAM CLULEY You would think so. QUENTYN TAYLOR So surely you can take the
Improving security posture across the Microsoft partner ecosystem
The Deputy CISO blog series is where Microsoft  Deputy Chief Information Security Officers (CISOs) share their thoughts on what is most important in
CISA Releases Binding Operational Directive on Prioritizing Security Updates Based on Risk
On June 10, the Cybersecurity & Infrastructure Security Agency (CISA) released Binding Operational Directive (BOD) 26-04 on Prioritizing Security Updates
Repeat Offenders in Phishing: Here’s How We Train Them Out
Why are people still clicking? That’s the question echoing through security teams right now. Even in programs built on “best