Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Strands Box: Open-source sandbox for AI agents
AWS released Strands Box, an open source sandbox for AI agents that pairs operating-system isolation with rules that can weigh what an agent has already done before letting it act again. Box is in developer preview and runs on Macs with Apple silicon, with Li
What makes some open source updates so difficult?
Many organizations adopt open source software because they see it as a cheaper alternative to proprietary development. Maintaining it, however, still requires engineering effort, according to Google’s case study, “How much does it cost to maintain a copy of a
Google's Open-Source Bug Bounty Program Has A Big AI Problem
It might surprise you to learn that most of what you see online is now AI-generated, including articles, music, social media posts, and comments all "written" by LLMs. Artists rightly criticize much
White House Says All AI Companies Must Report Security Incidents
The White House is reportedly requiring artificial intelligence companies to report and correct security incidents. The mandate from the White House Super Intelligence Force came Friday (Oct. 9) after Anthropic disclosed a series of breaches, Axios reported.
Video Cameras Are Everywhere—and Now They Are Being Hacked for War
The highly vulnerable devices have turned into tools for combatants to track, surveil and attack the enemy As U.S. and Israeli forces bombed Iran early this year, a poultry farmer in northern Israel decided to check on his chickens. When he launched the app o
Japan's Cybersecurity Vulnerabilities Exposed as AI-Powered Attacks Rise
Japan is facing a sharp increase in cyberattacks, with experts warning that artificial intelligence is making it easier for criminals to steal and exploit personal information, while the growing sophistication of online fraud is exposing weaknesses in the cou
(2026.10.12) (various)
Emacs Incomplete fix for Emacs CVE-2026-79992 (oss-sec ML, 2026.10.11)ramp 散 CVE-2026-79992 mutt mutt 2.4.3 released, fixes CVE-2026-107570 (oss-sec ML, 2026.10.09) Cyrus SASL
AI systems are fully capable of carrying out nightmare attacks against infrastructure and nobody's ready
Autonomous AI systems are fully capable of carrying out a nightmare cyberattack scenario – finding and attacking critical operational technology and industrial equipment, and shutting down access to water, power, and other daily life necessities. If this happens, defenders may only have minutes to d
SonicWall SMA 1000’s Latest SSRF Door Was Being Walked Through Within 24 Hours of Disclosure
On October 6, SonicWall issued advisory SNWLID-2026-0017. The bulletin stated plainly: “There is currently no evidence any of the vulnerabilities addressed in this release are being exploited in the wild.” Within 24 hours, the Previdian honeypot network detec
U.S. CISA adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the followin
Week in review: FortiBleed is still active, Patch Tuesday forecast
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Three questions a hospital CISO should ask a healthcare fintech vendor In this Help Net Security interview, Drew McCombs, CTO and CISO at Cylerity, explains how
Pentest-Windows
Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.