Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
US: 100+ water systems hit in July cyberattacks
CISA reported over 100 internet-exposed water systems were attacked in July, likely by Iran-linked actors targeting PLCs.
AI Tool 'HTTP Terminator' Finds New Desync Attacks
PortSwigger's James Kettle unveils an AI-powered open source tool that discovered novel HTTP request-smuggling techniques, expanding the attack surfac
CISA Red Team Breaches Two Critical Infrastructure Orgs
CISA red team assessments fully compromised two critical infrastructure organizations at the domain level, with one organization detecting nothing.
Critical Avada WordPress theme flaw enables zero-click RCE
A critical vulnerability chain in the Avada WordPress theme and Fusion Builder plugin allows unauthenticated attackers to execute arbitrary PHP code.
Unpatched Kaltura Flaws Allow File Read and RCE
CERT/CC disclosed two unpatched Kaltura mwEmbed vulnerabilities enabling remote file read and code execution via unsafe deserialization.
GPUThor attack bypasses NVIDIA ECC for root access
Researchers unveiled GPUThor, a Rowhammer attack bypassing ECC on NVIDIA GPUs, enabling DoS and root privilege escalation on Ampere models.
CISA: Hackers Hit 100+ US Water Systems
CISA confirmed cyberattacks targeted over 100 internet-exposed systems in the U.S.
CISA: Hackers hit 100+ US water systems in July
CISA confirmed cyberattacks targeted over 100 internet-exposed U.S. water and wastewater systems in July, amid a wave of hacks on critical infrastruct
Chrome Desktop Update Fixes 327 Security Flaws
Google released Chrome 152.0.7977.64 for desktop, patching 327 security issues, including 10 critical vulnerabilities.
Critical AD Flaws: ResetNightmare, KerberLoss
Semperis discovered critical Active Directory privilege escalation vulnerabilities, ResetNightmare and KerberLoss, that could let attackers disrupt se
Edge Infrastructure Under Siege: New Data Reveals Exploit
A joint Tenable-SentinelOne analysis of 93 CVE-actor pairs shows state-sponsored groups and cybercriminals both target edge infrastructure.
Adobe and Nvidia Patch Critical Vulnerabilities
Adobe and Nvidia released advisories fixing critical vulnerabilities in their products. Users should apply patches promptly.