Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
CISA Adds PaperCut Flaws to KEV Catalog
CISA has added two PaperCut vulnerabilities, CVE-2026-82078 and CVE-2026-81578, to its Known Exploited Vulnerabilities catalog due to active exploitat
CrowdSec 1.8.0 Adds Bot Detection and DoS Fixes
CrowdSec 1.8.0 introduces bot detection capabilities and addresses two denial-of-service vulnerabilities, enhancing security for users.
Hugging Face Hack Raises AI Takeover Fears
A hack on Hugging Face has sparked dramatic concerns about AI takeover and extinction, though details remain limited.
Trump Launches Federal Vulnerability Coordination Initiative
The Trump Administration announced a new federal initiative to speed up discovery, prioritization, and remediation of serious software vulnerabilities
PaperCut zero-days now used in data theft attacks
Two PaperCut NG/MF flaws, CVE-2026-81578 and CVE-2026-82078, patched last week, are now exploited in the wild for data theft, with over 800 servers ex
Surveillance Backdoors Found in Zbtlink Routers
Researchers discovered surveillance backdoors in Zbtlink routers sold in the US, including via Amazon, potentially enabling Chinese government access.
Eden Park email flaw exposed via expired anti-spam domain
New Zealand's Eden Park stadium used an expired anti-spam domain in email settings, allowing attackers to potentially intercept messages for years.
Cronos blockchain restarts after $74M Tectonic exploit
Cronos blockchain resumed operations after a price-manipulation attack on Tectonic allowed borrowing $74M, with only $6M stolen.
Iran cyberattack knocks UK power plant offline for 4 days
A UK power generation plant was taken offline for four days by a cyberattack attributed to Iran, just before the FBI warned of Iranian critical infras
PaperCut servers hit by RATs in ongoing campaign
Attackers are installing legitimate remote access tools on compromised PaperCut Application Servers, exploiting zero-day vulnerabilities in an ongoing
Smart Home Hubs Face Security Debt Risks
Smart home hubs marketed as seamless command centers hide security debt, making routers and hubs prime attack surfaces for agents.
Kaspersky Patches Endpoint Security Flaw
Kaspersky has patched a vulnerability in its Endpoint Security product, which was exploited by the 'HardBreacher' exploit from Nightmare Eclipse.