Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Microsoft fixes mouse settings reset bug in KB5124008
Microsoft resolved a bug in KB5120998 that reset mouse settings on non-English Windows 11 systems.
ShieldCrash Zero-Day Exploit Hits Microsoft Defender
A new ShieldCrash zero-day exploit targets Microsoft Defender, granting full System privileges on Windows machines with September 2026 patches.
Fortinet CVE-2025-25249 Exploited in PivotC2 RAT Attacks
A high-severity unauthenticated flaw in Fortinet products, CVE-2025-25249, was patched in January 2026 and is being exploited to deploy the PivotC2 RA
Bynario raises €2.1M for AI vulnerability platform
Bynario raised €2.1 million in a pre-seed round led by 360 CapitalPartners to develop an AI-powered platform for identifying, prioritising and address
Four Nation-State Actors Used Same Chrome Zero-Day Kit
Proofpoint found four espionage groups used the BlueMoon Chrome+Windows exploit kit within 12 days. Researchers suspect AI development.
CISA: WatchGuard RCE flaw now exploited in ransomware
CISA confirms ransomware gangs are exploiting CVE-2025-14733, a critical WatchGuard Firebox RCE flaw.
Microsoft fixes Windows desktop settings reset bug
Microsoft's September 2026 Patch Tuesday fixes a bug that reset desktop settings on Windows 11 24H2 and 25H2 after installing KB5120998.
Active Storage RCE CVE-2026-66066 Under Active Exploitation
CVE-2026-66066, known as KindaRails2Shell, is an Active Storage RCE in Rails now under active exploitation months after patches shipped for Rails 7.2.
Citrix NetScaler Auth Bypass Exploited After 15 Days
CVE-2026-19490, a critical authentication bypass in Citrix NetScaler ADC and Gateway, was disclosed on August 19, 2026, and exploited within 15 days.
Blue Moon exploit kit targets Chrome, Windows in espionage
At least four China-linked espionage groups used the BlueMoon exploit kit, chaining Chromium and Windows flaws, to target organizations in the US and
Four Spy Groups Used Same Chrome and Windows Exploit Kit
Four espionage groups deployed the BlueMoon exploit kit within a week, chaining Windows and Chrome vulnerabilities.
Project Glasswing: Few Vulnerabilities Disclosed
Analysis reveals only a fraction of Project Glasswing findings have been disclosed, with even fewer fixed, highlighting a human bottleneck in vulnerab