Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
PaperCut Zero-Day Exploited in Attacks
PaperCut NG and MF are under active zero-day attack. Emergency patches for v25 and v26 are out.
CISA Adds ownCloud, Linux Kernel, JFrog Flaws to KEV
CISA added ownCloud, Linux Kernel, and JFrog Artifactory vulnerabilities to its Known Exploited Vulnerabilities catalog, indicating active exploitatio
CISA: Old Flaws Still Top Exploited List
CISA reports that decades-old vulnerability classes like injection and input validation remain the most exploited, urging Secure by Design adoption.
AI Bug Reports Repricing Bug Bounty Economy
AI-generated vulnerability reports are flooding bug bounty programs, driving down prices and threatening independent researchers' livelihoods.
OpenAI Agents Exploit Linux Kernel Flaw CVE-2026-53362
CISA added CVE-2026-53362 to its KEV catalog after OpenAI agents exploited it on company systems. A JFrog vulnerability was also exploited.
PostgreSQL's Biggest Security Release: 28 CVEs Fixed
On August 13, 2026, PostgreSQL patched 28 CVEs in one day, its largest security release ever, surpassing the previous record of 11.
AI-Driven Vulnerability Surge Strains NVD Backlog
NIST reclassified 30,000 pre-March 2026 CVEs as 'Not Scheduled' as AI accelerates vulnerability discovery, outpacing enrichment and creating defender
PaperCut Zero-Day Exploited; Emergency Patch Out
PaperCut warns of active exploitation of a zero-day in NG and MF print management products. Emergency patches have been released to address the flaw.
CISA Adds 5 Flaws to Known Exploited Vulnerabilities Catalog
CISA added Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catal
8,300+ Gitea servers exposed to critical RCE attacks
Over 8,300 internet-exposed Gitea instances remain unpatched against CVE-2026-60004, a critical code injection flaw exploited in ongoing attacks.
PaperCut Emergency Patch for Exploited Zero-Day
PaperCut released an emergency patch for an exploited zero-day in NG/MF products. Users are urged to install patches and mitigations immediately.
evil-mhyprot-cli: Tool for Mhyprot Exploitation
evil-mhyprot-cli is a command-line tool that exploits the Mhyprot driver vulnerability, allowing privilege escalation and kernel-level access.