Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution
A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client's memory, and the researcher who reported it turned that into code execution on the uploading machine. The curl project fixed it on October 14 in curl 8.23.0. Taking over a client needs exa
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I’m speaking at ATTENTION: Democracy, Rebuilt in Montreal, Canada. The event runs October 21–23, 2026, and my talk is on Wednesday, October 21. I’m speaking at the University of Toronto in Toronto, Ontario, Canada, at 5 PM ET on Octo
Cyberattack on Connected Fridges in France
Another IoT cyberattack, this one in France: Hackers gained control of the software that regulates the temperatures of the refrigeration units, forcing some to warm to 50C (120F) overnight, according to one supermarket chain affected. […] Normally, supermarket freezers go through a short perio
Virtual Event Today: Zero Trust Strategies Summit
SecurtyWeek’s 2026 Zero Trust Strategies Summit kicks off today at 11AM ET as a fully immersive virtual conference and expo. This summit is laser-focused on the next generation of Zero Trust and Identity security, moving beyond theory to deliver actionable strategies for a world where every us
Ledger asks sellers across Asia to halt sales after supply-chain attack
Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend device sales and remove products from shelves while it investigates device tampering.
US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms
Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their location.
Microsoft fixes VPN issues caused by September Windows updates
Microsoft has resolved a known issue that caused Always On VPN connection issues after installing the September 2026 Windows 11 security updates.
Microsoft: Recent Windows updates may trigger Remote Desktop failures
Microsoft has confirmed that non-admin users may be unable to connect to devices via Remote Desktop after installing recent Windows updates if the "Administrator protection" security feature is enabled.
CYPFER Announces Leadership Transition Under New Ownership by Apros Group
Jason J. Hogg Takes Full Operational Control Following August Acquisition; Company Expands Senior Leadership and Advisory Board MIAMI & TORONTO — The Board of CYPFER today announced that the company and CEO Daniel Tobok have separated, and he no longer holds
Google Says New Frontier Model Excels at Deep Work Across Domains
Google’s new frontier model, Gemini 4 Argon, is now available to developers, enterprises, scientists and consumers, the company said in a Tuesday (Oct. 13) blog post. “Argon excels at deep work in complex, real-world tasks across domains including coding, fin
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on October 13. The flaw affects multi-tenant applications on SAP Business Technology Platform (BTP) that use the SDK, SAP's o
Food Lion, Stop & Shop and Hannaford websites face outages after cybersecurity issue
A group of grocery stores, including Stop & Shop, Hannaford and Food Lion, are facing outages to their websites and mobile apps this week. Ahold Delhaize USA, the parent company of the grocery store chains and others, said in a statement Monday that was later