Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
ServiceNow Patches 3 Critical Code Injection Flaws
ServiceNow fixed three critical code injection vulnerabilities that could let attackers execute arbitrary code and access or tamper with data.
Critical Ruby on Rails Flaw Under Active Attack
A critical arbitrary file read vulnerability in Ruby on Rails, dubbed KindaRails2Shell, is being exploited to extract secrets and execute code remotel
CISA Adds Linux Kernel, JFrog CVEs to KEV
CISA added CVE-2026-53362 and CVE-2026-66384 to its KEV catalog on August 27, 2026, following exploitation via OpenAI agents.
Google cuts Pixel 11 MTE, GrapheneOS drops support
GrapheneOS will not support Pixel 11 because Google removed Memory Tagging Extension (MTE) from the Tensor G6 chip, citing leaked documents.
PaperCut Patches Exploited Flaws CVE-2026-82078,
PaperCut issued a second emergency patch for two actively exploited vulnerabilities, tracked as CVE-2026-82078 and CVE-2026-81578.
Prioritizing Vulnerabilities When KEV, EPSS, CVSS Clash
Dr. Joye Purser explains ranking vulnerabilities when KEV, EPSS, and CVSS conflict, prioritizing active exploitation, then exploit likelihood, then se
Microsoft: Ignore False Defender Offline Alerts
Microsoft says to ignore incorrect 'Defender Antivirus is turned off' alerts after recent updates. A fix is coming.
Zimbra, Citrix NetScaler Flaws Exploited
At least 274 Zimbra servers were compromised via CVE-2026-73570, and a previously patched Citrix NetScaler flaw is being exploited.
Dahua Cameras Hit by Multiple DoS Flaws
CyberDanube disclosed multiple denial-of-service vulnerabilities in Dahua IPC, SD, NVR, XVR, EVS, VTO, VTH, ASI, and TPC camera series.
ecdsa-private-key-recovery Tool Released on Kitploit
Kitploit features ecdsa-private-key-recovery, a tool for recovering ECDSA private keys, aiding in vulnerability analysis and security testing.
Critical WordPress Plugin Flaws Enable Site Takeover
Critical flaws in WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP allow authentication bypass, account takeover, and code execution.
AI Scripts Lower Barrier for ICS Attacks
CISA advisory AA26-231A warns of active threats to Siemens S7 PLCs, with AI-generated scripts enabling less skilled attackers.