Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Marimo Notebook Flaw Allows MCP Command Execution
A high-severity flaw in Marimo notebooks lets attackers execute MCP commands via crafted notebooks when opened in edit mode.
Oracle patches wouldn't stop this attack
Attackers used SQL injection and Java code in Oracle DB to steal credentials, bypassing all 1,449 patches.
Attackers Exploit miniOrange SAML Flaws for WordPress Admin
Threat actors are exploiting two unauthenticated authentication bypasses in the miniOrange SAML 2.
WordPress MiniOrange SSO Plugin Flaws Allow Auth Bypass
Two authentication bypass vulnerabilities, CVE-2026-61979 and CVE-2026-15981, affect the MiniOrange SAML 2.
Nvidia NemoClaw flaw lets attackers hijack AI agent model
Oasis Security disclosed CVE-2024-0128 in Nvidia NemoClaw, allowing full control of a developer's AI agent model server.
CISA gives Oracle flaw 3-day patch deadline
CISA added CVE-2026-21962, a max-severity Oracle flaw, to its KEV catalog, mandating federal agencies patch within three days due to active exploitati
Bendix EC80 Brake ECU Vulnerabilities
Vulnerabilities in Bendix EC80 brake ECUs could let attackers disable ABS, traction control, or steering assist.
PayRange API Vulnerability Allows Info Disclosure and DoS
A vulnerability in PayRange API could let attackers disclose sensitive data, modify devices, or cause denial of service.
Ebyte NE2-D11 Flaws Allow Admin Access
Multiple vulnerabilities in Ebyte NE2-D11 could let attackers gain admin access, steal data, alter configs, hijack sessions, or disrupt operations.
Zoneminder RCE Flaw Allows Full Remote Code Execution
A vulnerability in Zoneminder versions 1.37.48 and 1.38.3 could allow full remote code execution as the web server user.
Siemens SIMATIC IoT2050 Node-RED Auth Flaw
Siemens SIMATIC IoT2050 Advanced devices with Node-RED have a missing authentication vulnerability, letting remote attackers create malicious flows.
FURUNO FA-50 AIS Transponder Vulnerabilities
Vulnerabilities in FURUNO FA-50 Class B AIS Transponder could allow attackers to alter device settings. All versions are affected.