Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Novarad Updates NovaPACS EI to 9.1, Major Security Upgrade
Novarad has upgraded over 1,000 NovaPACS EI customers to version 9.1, featuring enhanced enterprise security and secure mobile access.
NL-KAT Coordination: Modular Network Scanning Framework
NL-KAT Coordination is a modular framework that integrates tools and databases to detect vulnerabilities and configuration errors, producing accessibl
Chinese ZBT Routers Ship with Built-In Backdoors
ZBT routers sold globally as white-label products contain multiple manufacturer-installed backdoors, posing a security risk to users.
Amazon Kiro IDE Flaw Enables Data Exfiltration
Researchers found a prompt injection vulnerability in Amazon Kiro IDE 0.7.45 on Windows that can exfiltrate sensitive data via Kiro Powers.
AI Finds Critical Flaw in Bitcoin Lightning, Devs Warn
Core Lightning confirmed AI-generated reports found real flaws. Operators are urged to verify and install the upcoming update promptly.
WinFlesher: AD Attack Surface Assessment Framework
WinFlesher automates Active Directory attack surface assessment, correlating vulnerabilities with attack paths to domain compromise and providing reme
Cyber Exercise Helps Utilities Harden OT Against Iranian
A multi-agency exercise demonstrated how critical infrastructure operators can validate IT/OT readiness against emerging threats targeting water syste
GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000
Researchers disclosed GPUThor, a Rowhammer attack on NVIDIA RTX A6000 GPUs that bypasses ECC, enabling DoS and root privilege escalation.
CISA Adds Six Exploited Flaws to KEV Catalog
CISA added six actively exploited vulnerabilities to its KEV catalog, including a high-severity Citrix NetScaler flaw and bugs in Linux and SQL Server
PaperCut NG, MF zero-day exploited in attacks
PaperCut warns of active zero-day exploitation in all versions of NG and MF.
Fuel-Boss Vulnerabilities Allow Remote Code Execution
Critical vulnerabilities in All-Line Equipment Company's Fuel-Boss V1 could let attackers execute arbitrary commands or code remotely.
Ebyte NA111-M Flaws Allow Full Device Compromise
Critical vulnerabilities in Ebyte NA111-M firmware 9013-2-17 could let attackers fully compromise the device. Patches are advised.