Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Critical Gitea RCE Actively Exploited, CISA Warns
CISA warns of active exploitation of CVE-2026-60004, a critical RCE in Gitea. Attackers with write access can execute arbitrary commands.
Iranian APT33 Targets U.S. Water Supply
Iranian hackers APT33 reportedly exploit U.S. water systems, causing boil-water advisories amid federal secrecy concerns.
CISA: 100+ Water Systems Targeted in July Attacks
CISA reported over 100 internet-exposed water systems were targeted in July cyberattacks linked to Iran, and issued guidance to reduce exposure.
Gitea CVE-2026-60004 exploited in wild, CISA adds to KEV
CISA added CVE-2026-60004, a critical code injection flaw in Gitea, to its KEV catalog after confirming active exploitation.
Hackers target SharePoint RCE chain with PoC exploits
Attackers are chaining two Microsoft SharePoint flaws, CVE-2026-55040 and CVE-2026-63520, for RCE on unpatched servers.
Snowflake ends service-account passwords
Snowflake deprecates legacy service account passwords, forcing migration to passwordless auth. The challenge is inventorying and owning accounts.
Chrome 152 Patches Over 300 Vulnerabilities
Google's Chrome 152 update fixes over 300 security flaws, many found via AI. Researchers continue to uncover high-value bugs.
Ubiquiti patches three max severity flaws
Ubiquiti released patches for three maximum-severity vulnerabilities in UniFi Protect, UniFi OS, and UniFi Talk, all remotely exploitable without priv
CISA Adds Gitea Flaw to Known Exploited Vulnerabilities
CISA added a Gitea vulnerability to its Known Exploited Vulnerabilities catalog, indicating active exploitation.
Hackers exploit critical Gitea flaw in code injection
Attackers are actively exploiting CVE-2026-60004, a critical code injection flaw in Gitea, to execute arbitrary commands and deploy crypto miners.
CISA Warns of Exploited Gitea Vulnerability
CISA warns that CVE-2026-60004, a Gitea RCE flaw patched in v1.27.1, is actively exploited. Urges immediate patching.
AI-Enabled Attacks Target Siemens PLCs
Widespread AI-enabled attacks are targeting Siemens PLCs, as discussed on Risky Business #850 with NCSC CTO Ollie Whitehouse.