Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Magento, Adobe Commerce Zero-Day Exploited in Attacks
Attackers exploit an unpatched Magento and Adobe Commerce flaw, named StyleSmuggler, to run code on servers without login.
JetBrains Breach via TeamCity Flaw
JetBrains urges Cadence users to rotate credentials after attackers exploited a critical TeamCity vulnerability to breach its environment.
Critical VMware Flaw Lets VM Admins Execute Host Code
Broadcom patched CVE-2026-59346, a critical integer-overflow flaw in VMware Workstation and Fusion, allowing local attackers with elevated privileges
PaperCut Flaws Exploited in School Attacks
Attackers exploit two PaperCut flaws, CVE-2026-81578 and CVE-2026-82078, to steal credentials and gain privileged access in U.S. and European schools.
39 Passkey Attack Methods Documented
Researchers have documented at least 39 attack methods and exploitation scenarios targeting passkey authentication, many with working proof-of-concept
PaperCut Flaws Exploited in School Credential Theft
Threat actors exploit PaperCut vulnerabilities CVE-2026-81578 and CVE-2026-82078 to steal credentials from U.S. and European schools.
Elementor Pro Flaw CVE-2026-32475 Exploited in Attacks
A critical arbitrary file upload vulnerability in Elementor Pro is being actively exploited to compromise WordPress sites.
HPE Patches Critical RCE Flaws in AOS-CX
HPE fixed critical remote code execution vulnerabilities in AOS-CX that allow unauthenticated attackers to gain elevated privileges via crafted packet
vulnclaw 0.3.9 Release
vulnclaw 0.3.9 has been released. The article content is unavailable due to a loading error.
CISA Adds Chromium V8 Flaw to KEV Catalog
CISA added a Google Chromium V8 vulnerability, CVE-2026-850, to its Known Exploited Vulnerabilities catalog, indicating active exploitation.
faraday_plugins v1.30.0 Released
faraday_plugins v1.30.0 is now available, offering updates for security testing and vulnerability analysis tools.
PostgreSQL Fixes 12-Year-Old Flaw in Logical Decoding
PostgreSQL patched CVE-2026-6471, a 12-year-old flaw allowing replication-role users to execute arbitrary code as the OS user.