Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto
Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners.
Ledger users reportedly drained of over $86 million in suspected exploit
The incident underscores the vulnerability of hardware wallets, urging users to reassess security practices and the reliability of such devices.
Per Scholas Names Caitlyn Brazill as CEO and President, Succeeding Plinio Ayala After His 28-Year Tenure
NEW YORK, Oct. 9, 2026 /PRNewswire/ -- Per Scholas, the national workforce accelerator advancing economic mobility through no-cost training for high-growth careers, today announced that Caitlyn Brazill, current President of Per Scholas, will become Chief Exec
Cybersecurity Risk Oversight in the Age of AI
As advanced AI models — and autonomous AI “agents” — grow more capable, so do the associated corporate cybersecurity risks. Atincreasingly modest cost, AIsystems can now identify and exploit latent software vulnerabilities, such as by planting malicious code
In open source cybersecurity, AI is kind of a problem — but it can also be a solution
The last few years have seen a growing wave of vulnerability disclosures heading towards the cybersecurity industry, and the people working on fixing these flaws are often struggling to keep up. And
Unpatched AhsayCBS Vulnerabilities Exploited in the Wild
The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.
HSCC Outlines Hospital and Vendor Roles in Clinical AI Incident Response
When a vendor's clinical AI model fails mid-use, a health system cannot simply retrain it. New HSCC guidance spells out what the hospital owns, what the vendor owns and why the contract shapes the response. Source: HSCC Outlines Hospital and Vendor Roles in C
How to keep AI agents within their permissions
AI agents can use valid credentials to perform actions beyond their assigned permissions, creating risks that traditional access controls may not prevent. Token Security explains how organizations can enforce agent-specific policies without sacrificing autonomy.
ARTEX AI agent goes closed-source after being linked to South Korean bank hacks
The ARTEX incident underscores the urgent need for robust AI safeguards and internal security measures to counter evolving cyber threats.
Max severity SonicWall SMA1000 flaw now exploited in attacks
Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago.
Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
Tata says its workforce strategy won't be affected by PERM suspensions and is hiring 15,000 more workers
Indian tech giant Tata Consultancy Services said the Trump administrations new restrictions on employment-based green card filings will not affect its hiring plans in the US. In a stock exchange fil