Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution
A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client's memory, and the researcher who reported it turned that into code execution on the uploading machine. The curl project fixed it on October 14 in curl 8.23.0. Taking over a client needs exa
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I’m speaking at ATTENTION: Democracy, Rebuilt in Montreal, Canada. The event runs October 21–23, 2026, and my talk is on Wednesday, October 21. I’m speaking at the University of Toronto in Toronto, Ontario, Canada, at 5 PM ET on Octo
Cyberattack on Connected Fridges in France
Another IoT cyberattack, this one in France: Hackers gained control of the software that regulates the temperatures of the refrigeration units, forcing some to warm to 50C (120F) overnight, according to one supermarket chain affected. […] Normally, supermarket freezers go through a short perio
Virtual Event Today: Zero Trust Strategies Summit
SecurtyWeek’s 2026 Zero Trust Strategies Summit kicks off today at 11AM ET as a fully immersive virtual conference and expo. This summit is laser-focused on the next generation of Zero Trust and Identity security, moving beyond theory to deliver actionable strategies for a world where every us
Ledger asks sellers across Asia to halt sales after supply-chain attack
Ledger has asked resellers and distributors of its wallets in Indonesia, Singapore, Thailand, the Philippines, Vietnam, Malaysia, and Hong Kong to suspend device sales and remove products from shelves while it investigates device tampering.
US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms
Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their location.
Microsoft fixes VPN issues caused by September Windows updates
Microsoft has resolved a known issue that caused Always On VPN connection issues after installing the September 2026 Windows 11 security updates.
Microsoft: Recent Windows updates may trigger Remote Desktop failures
Microsoft has confirmed that non-admin users may be unable to connect to devices via Remote Desktop after installing recent Windows updates if the "Administrator protection" security feature is enabled.
Google Says New Frontier Model Excels at Deep Work Across Domains
Google’s new frontier model, Gemini 4 Argon, is now available to developers, enterprises, scientists and consumers, the company said in a Tuesday (Oct. 13) blog post. “Argon excels at deep work in complex, real-world tasks across domains including coding, fin
Stocks in news: Adani Enterprises, Hyundai Motor India, BHEL, BEL, Groww, Tata Elxsi and RailTel
Indian stocks rallied impressively, as benchmark indices surged by over 1.5%, fueled by a wave of positive investor sentiment. Key players like Adani Enterprises and Hyundai Motor India are capturing attention due to significant recent updates. While Tata Elx
Most Online Shoppers Still Use Passwords When There’s a Safer, Simpler Option
The idea of passkeys is fairly new. It was Apple that popularized the term when it launched the password-less log-in feature in 2022. Google and Microsoft followed suit soon after, further propellin
CYPFER Announces Leadership Transition Under New Ownership by Apros Group
Jason J. Hogg Takes Full Operational Control Following August Acquisition; Company Expands Senior Leadership and Advisory Board MIAMI & TORONTO — The Board of CYPFER today announced that the company and CEO Daniel Tobok have separated, and he no longer holds