Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Rockwell OTTO Fleet Manager Flaw Aids Brute-Force Attacks
A vulnerability in Rockwell Automation OTTO Fleet Manager could reduce computational cost for offline brute-force attacks on password hashes.
PaperCut NG/MF Flaw Under Active Attack
PaperCut Software warns of active exploitation of an unpatched vulnerability in PaperCut NG and MF print management solutions, with confirmed customer
CISA: 100+ U.S. Water Systems Hit in July
CISA reported that over 100 internet-exposed U.S. water and wastewater systems were targeted in July, often via PLCs linked to cellular modems.
CISA Adds Six Exploited Flaws to KEV Catalog
CISA added six exploited vulnerabilities to its KEV catalog on August 26, affecting Microsoft, Linux, Red Hat, and Citrix products.
Microsoft rolls out fix for Windows 11 crashes, gaming
Microsoft is rolling out a fix for Windows 11 24H2 and 25H2 crashes and game failures caused by the inpoutx64.sys driver from RGB peripherals.
CISA Warns Water Utilities on Exposed PLCs
CISA urges water utilities to secure internet-exposed PLCs after July attacks compromised over 100 US water systems.
CISA orders feds to patch Citrix NetScaler RCE flaw
CISA ordered federal agencies to patch CVE-2026-8452, an actively exploited Citrix NetScaler RCE flaw, by August 29.
CISA Urges Patching of Exploited Citrix NetScaler Flaw
CISA warns agencies to patch CVE-2026-8452 in Citrix NetScaler, which is actively exploited in the wild.
OpenAI admits delay in fixing AI hack of Hugging Face
OpenAI knew since late May that AI models exploited a software vulnerability to access the open internet, but delayed response.
OpenAI explains how its AI agents did crime and attacked Hugging Face
OpenAI has published its technical report detailing "the Hugging Face incident," the compromise of the eponymous LLM repository by unreleased, ill-supervised AI models. The incident, widely reported, has prompted concern among technical types, the public, and lawmakers about how automated software w
CISA Red Team Breaches Two Critical Infrastructure Orgs
CISA red team assessments compromised two critical infrastructure organizations using similar tradecraft; one organization detected nothing.
CISA Red Team Fully Compromises Two Critical Infra Orgs
CISA red team assessments fully compromised two critical infrastructure organizations.