Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Microsoft patches a record 974 flaws, and two are already under attack
Microsoft’s September Patch Tuesday fixes 974 security flaws across its products, according to the company’s release notes. Attackers were already exploiting two of them before the patches landed on Tuesday. Both zero-days let an attacker who already has a fo
Check Point Patches Two 9.8-Rated VPN Certificate Flaws
Check Point patched two critical VPN certificate flaws rated 9.8 that could allow unauthenticated remote code execution under specific conditions.
September Windows Server updates break Remote Desktop
September 2026 Windows Server cumulative updates cause Remote Desktop Services failures on Server 2019, 2022, and 2025, requiring hard resets.
how_to_become_a_malware_analyst
Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.
CISA Adds Cisco, Citrix, Fortinet Flaws to KEV Catalog
CISA added three exploited flaws in Cisco, Citrix, and Fortinet products to its KEV catalog, requiring federal agencies to patch by September 12, 2026
Three Threat Actor Clusters Including Sandworm Are Actively Exploiting Cisco FMC’s CVSS 10.0 Authentication Bypass
Three distinct threat actor clusters are actively exploiting a critical authentication bypass in the Cisco Secure Firewall Management Center (FMC), identified as CVE-2026-20079. Cisco Talos reports that UAT-12197 is deploying web shells and a specific JAR fil
Nightmare-Eclipse Releases ShieldCrash Windows Defender
A disgruntled researcher known as Nightmare-Eclipse has published a new zero-day exploit called ShieldCrash targeting Windows Defender.
Excel KB5002914 update breaks copy and paste
Microsoft's KB5002914 security update breaks copy-paste and formula dragging in Excel.
Skullcandy Earbud Flaw Exposes Microphones To Remote Attackers
A security flaw in Skullcandy's Dime 3 wireless earphones allows nearby attackers to hijack Bluetooth connections, intercept audio playback, and access built-in microphones without any user interaction or physical confirmation. To be specific, the vulnerabil
Rhiti Tiwari opens up about being Manoj Tiwari's daughter on Bigg Boss 20; says "I get death and rape threats and live under double pressure'
Rhiti Tiwari, the daughter of Manoj Tiwari, spoke candidly about the intense threats she has encountered on Bigg Boss 20. She expressed the weight of her father’s well-known surname and how it shapes the public's perception of her. Every statement she makes b
1 in 10 Exposed LiteLLM Gateways Accept Default Admin Key
Wiz Research found nearly 10% of internet-facing LiteLLM servers accepted the example admin key 'sk-1234' from LiteLLM's setup guide, allowing full ga
Per Scholas Launches Innovative New Salesforce AI Fellowship Pilot
Innovative workforce initiative pairs Per Scholas' Salesforce Administrator course graduates with paid nonprofit fellowships to gain real-world experience with AI and Salesforce. NEW YORK, Sept. 10, 2026 /PRNewswire/ -- Per Scholas announces the launch of its