News
4 November 2026
Phishing Without Typos or Bizarre Promises: Would You Spot It?
Modern phishing is no longer easy to identify by typos or bizarre promises. Try ten realistic workplace scenarios and see whether you can distinguish a scam from legitimate communication.
3 November 2026
An expired payment card may still work
An expired payment card may not be completely inactive. Researchers showed how an expiration date could be modified during an NFC payment without breaking the card’s cryptography.
2 November 2026
AI and LLM security testing: when your AI assistant becomes a confused deputy
An AI assistant embedded in a banking app was able to initiate a transfer on its own. All it took was combining a single XSS vulnerability with the model’s willingness to help, and the bank’s security controls were bypassed.
30 October 2026
TECHBOARD #4: Attackers Push Malicious LiteLLM Update, Critical Ruby Flaw Threatens GitLab
Attackers slipped malware into the official LiteLLM distribution, while a critical GitLab flaw could allow unauthenticated remote code execution. TECHBOARD #4 also covers a certificate authority using a private key valued at just 4, new PHP2Shell complications, and other security findings.
28 October 2026
Red Teaming vs. Penetration Testing: Key Differences and Benefits
What's the difference between penetration testing and red teaming? Learn what each approach reveals, their key benefits, and when combining them can strengthen your organisation's cybersecurity.
27 October 2026
Social Engineering and Vishing: Why Are Attacks on People Still So Successful?
Even if your spam filter caught 100% of phishing emails, attackers could still get their hands on your data. All it takes is one phone call using a cloned version of your colleague's or manager's voice.
Sign up for our newsletter for all the important cybersecurity and ethical hacking news.
© 2026 citadelo AG. All rights reserved.
