Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
WeChat Zero-Click Worm Hijacks Phones via Calls
Researchers at Calif built a zero-click worm that hijacks Android and iOS phones through a simple incoming WeChat call.
WeChat zero-click worm patched after VoIP flaw
Tencent patched a zero-click VoIP flaw in WeChat that allowed a worm to spread via calls.
Chrome V8 Zero-Day Exploited in the Wild
Google patched 230 Chrome vulnerabilities, including CVE-2026-87491, an actively exploited V8 out-of-bounds write enabling code execution.
Fortinet Patches Critical FortiMonitorOnSight Flaws
Fortinet fixed critical unauthenticated vulnerabilities in FortiMonitorOnSight that could allow authentication bypass and browser traffic proxying.
cPanel Flaw Lets Hosting Account Run Code as Root
cPanel patched a flaw allowing an authenticated account with mail privileges to create files and execute code as root, affecting all supported version
LTM, IBM, Red Hat Partner on Lightwell for AI Remediation
LTM collaborated with IBM and Red Hat on Lightwell, an AI-driven platform to help enterprises scale open-source software vulnerability remediation and
New Microsoft Defender PoC Bypasses ShieldBreak Patch
Researcher Chaotic Eclipse released a PoC for ShieldCrash, a zero-day bypassing Microsoft's patch for CVE-2026-69414 (ShieldBreak).
SAP Patches CVSS 10.0 Kernel Flaw Allowing RCE
SAP released updates fixing CVE-2026-44756, a CVSS 10.0 memory corruption flaw in Extended Passport Processing enabling unauthenticated remote code ex
ICS Patch Tuesday: Schneider, Siemens Fix Critical Flaws
Schneider Electric, Siemens, AVEVA, and Rockwell Automation released patches for critical vulnerabilities in industrial control system products.
Ivanti Patches Critical Flaws in ITSM, Sentry, EPMM
Ivanti fixed six critical Neurons for ITSM RCE flaws and authentication bypasses in Sentry and EPMM, urging immediate patching.
Microsoft Patches Record 974 Flaws, Two Zero-Days
Microsoft's Patch Tuesday fixes a record 974 vulnerabilities, including two actively exploited zero-days. Over 110 are critical.
Microsoft fixes record 964 flaws, 2 exploited zero-days
Microsoft's September 2026 Patch Tuesday addresses 964 CVEs, including 104 Critical and 860 Important, making it the largest Patch Tuesday release on