On August 12, Pillar Security published research on a Deadbugz-linked MCP supply-chain campaign. Their report described a malicious MCP server that initially looked harmless, then changed the metadata it returned to an AI agent after several normal tool calls. This post is being published on the same day, August 12, as Pillar’s disclosure. The overlap […]
The quantum computing era, although not yet fully realized, is already influencing how organizations should think about security. In this article, I explore the threats that quantum technologies pose to businesses, who will be affected, and what can be done today to prepare for the future. Quantum Threats on the Horizon Breaking the Foundations of […]
The latest threat landscape On October 15 2025 BleepingComputer broke the news that attackers had launched a convincing phishing campaign aimed at users of LastPass and Bitwarden—two of the most popular password managers. E‑mails arriving from domains such as lastpasspulse[.]blog and bitwardenbroadcast[.]blog falsely warned users that the companies had suffered security breaches and urged recipients […]
Agentic artificial intelligence – AI systems capable of setting goals, devising strategies and executing actions without constant human oversight – is no longer science fiction. As generative AI exploded into the mainstream and cybersecurity platforms began to sprinkle “AI‑powered” on every dashboard, a more advanced class of agents quietly emerged. These agentic AI systems are […]
Overview A critical remote‑code execution (RCE) vulnerability dubbed RediShell (CVE‑2025‑49844) recently sent shockwaves through the cloud‑security community. Discovered by the Wiz research team and demonstrated at Pwn2Own Berlin, the bug has been lurking in the Redis in‑memory database for more than 13 years. It arises from a use‑after‑free flaw in Redis’s embedded Lua scripting engine. […]
Imagine you’ve just hired a new IT specialist. Their CV looks great, their references are impeccable, and the interview was professional. You send them a laptop, provide access to their systems, and… a few days later, your SOC (or external IT provider) notices the installation of strange software. This isn’t a scene from an action […]
Recent weeks in the world of cybersecurity have shown one thing: the Scattered Spider group has no intention of letting up. On the contrary, they’re accelerating. The FBI and CISA are sounding the alarm, and we’re seeing an increase in reports from companies that have fallen victim to their clever (and unfortunately effective) tactics. According […]
If you run a business in the EU (or have clients in the EU) and the word “cybersecurity” gives you a little shiver, you’ve come to the right place. Introducing NIS2 – a new EU directive that will come into force in 2024/2025 and will affect significantly more companies than its predecessor, NIS1. But don’t […]
Phishing – Why Should We Still Care When 2025 Is Full of New Threats? The year 2025 is a real show of force for cybercriminals, who are constantly pulling out new tools and spectacular vulnerabilities from their sleeves. Just look at a few examples of attacks and zero-day vulnerabilities: RansomHub – a ransomware group that […]
In recent months, we have been observing a growing number of inquiries from our clients and business partners regarding Threat Hunting. The questions are very specific: what exactly is Threat Hunting, what effects does it bring, how is it conducted, and – most importantly – is it worth implementing in your organization? We are therefore […]
Our knowledge, your security – a shield in the digital reality.
