Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
CISA Gives 3-Day Deadline for Zimbra Flaw
CISA mandates patching Zimbra CVE-2026-73570 within three days due to active exploitation allowing full account takeover.
Weekly Recap: AI PLC Attacks, GitLab, Stripe Leaks
This week's threats include AI-powered PLC attacks, GitLab vulnerabilities, and Stripe key leaks.
Critical Keycloak Flaw Allows Account Takeover
Red Hat and Keycloak patched CVE-2026-18963, a critical flaw allowing unauthenticated attackers to force password resets and take over any account.
Unpatched Calix router flaw exposes internal devices
CVE-2026-75501 in Calix GS5239XG routers lets remote attackers create port-forwarding rules, bypassing NAT and firewall protections. No patch exists.
WordPress miniOrange SAML plugin auth bypass exploited
Attackers are exploiting two critical auth bypass flaws (CVE-2026-61979, CVE-2026-15981) in the miniOrange SAML SSO plugin to forge SAML responses and
AI Vulnerability Discovery Outpaces Repair
AI accelerates vulnerability discovery, outpacing repair efforts amid stricter regulations, demanding urgent action from cybersecurity teams.
Iran-linked hackers knocked UK power plant offline
Suspected Iranian hackers caused a UK power plant shutdown for days, raising concerns about critical infrastructure resilience.
China-linked hackers exploit VMware vCenter flaw
A suspected China-linked group exploits a critical VMware vCenter Server flaw, compromising 361 systems across 47 countries, per QUIRSO.
AWS patches SDK flaw that enabled credential theft
AWS fixed a flaw in seven SDKs that could let attackers steal credentials via a manipulated region field. Pi Inc.
Spring Framework Patches 91 Vulnerabilities
Spring Application Framework patched 91 vulnerabilities, bringing 2025's total to over 200, compared to 16 in 2024 and 22 in 2023.
Microsoft Teams to block external bots in meetings
Microsoft is rolling out a new Teams policy that automatically blocks external bots from joining meetings, enhancing security against malicious apps.
Iran-Linked Hackers Shut Down UK Power Plant
Iran-linked hackers disrupted a UK power plant for four days, raising concerns about energy infrastructure resilience.