Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
UK's Online Safety Act has made 'absolutely no difference,' kids say
Children have told England's Children's Commissioner, Dame Rachel de Souza, that the UK's Online Safety Act (OSA) "has made absolutely no difference" to their ability to access harmful content online. More than a year after the OSA's key child protection duties took effect, de Souza told MPs and pee
Elementor Pro flaw exploited in WordPress attacks
CVE-2026-32475 in Elementor Pro is exploited to upload webshells. Over 190,000 attacks blocked since August 19.
CISA Adds Seven Exploited Flaws to KEV Catalog
CISA added seven flaws to its Known Exploited Vulnerabilities catalog, including a critical SonicWall SMA 1000 SSRF (CVE-2026-83548) used in attacks d
3M WordPress Sites Hit by SQLi Flaw
A critical SQL injection vulnerability (CVE-2026-19949) in a WordPress migration plugin affects over 3 million sites, potentially allowing unauthentic
Cisco Warns of Unpatched Email Flaws, Patches Critical Bugs
Cisco disclosed unpatched S/MIME flaws in Secure Email that could expose encrypted content, and patched critical IOS XR and Nexus vulnerabilities enab
Chaotic Eclipse Releases CrowdStrike Falcon Zero-Day PoC
Researcher Chaotic Eclipse published FalconFlank, a proof-of-concept exploit for a CrowdStrike Falcon zero-day elevation of privileges vulnerability.
Windows KB5120998 resets desktop settings
Microsoft confirmed KB5120998 resets desktop settings on Windows 11 24H2 and 25H2, showing black wallpaper. Users cannot restore custom settings.
nuclei-cve-analyzer Tool Released on Kitploit
Kitploit features nuclei-cve-analyzer, a tool for vulnerability analysis and automated security testing.
Plex urges users to patch security flaws immediately
Plex has released updates for Media Server and Desktop to fix multiple security issues, urging users to patch immediately.
CISA KEV Adds 7 Flaws; 3 Target AI Infrastructure
On September 2, 2026, CISA added seven vulnerabilities to its KEV catalog, with three targeting AI and ML infrastructure—the first batch where AI comp
Graph-Based Cyber Threat Framework for Smart Microgrids
Researchers propose a graph-based framework to model cyber threats and assess risks in smart microgrids, addressing IoT-enabled cyberphysical vulnerab
BAS-Guardian Tool Updated for Building System Scans
BAS-Guardian, a free open-source scanner, has been updated to help detect internet-exposed Building Automation Systems and BACnet devices.