Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
ESCepcion: Open-Source AD CS Auditor Released
ESCepcion is a new open-source tool for auditing Active Directory Certificate Services, helping identify AD CS vulnerabilities.
DeFi Governance Attacks: Risks of Concentrated Voting Power
DeFi governance attacks exploit concentrated voting power, not code flaws, to pass malicious proposals and drain funds.
Coldcard Firmware Fixes $130M Bitcoin Seed Flaw
Coinkite released new Coldcard firmware after a seed-generation flaw exposed users to over $100 million in Bitcoin thefts.
US Lab Probes Chinese Lidar Security Risks
A U.S. Department of Energy lab is investigating potential national security risks from Chinese lidar sensors used by American automakers.
Microsoft Defender Driver Abused for Kernel File Deletion
Check Point Research found that Microsoft Defender's signed BTR.sys driver can be weaponized to delete security software at boot on Windows 7-11, with
SWN #609: Surveillance, TrueCONF, Siemens, N-Able
Security Weekly News episode #609 covers surveillance, murder hornets, TrueCONF, Siemens, N-Able, and more cybersecurity topics.
TSN Protocol Flaws Could Disrupt Industrial Operations
New research reveals that unprotected Time-Sensitive Networking (TSN) protocols are vulnerable to attacks that could disrupt or manipulate physical pr
CISA orders patch for exploited TrueConf flaws
CISA added two TrueConf flaws to its KEV catalog after attacks. Exploits allow server takeover and malware distribution via trojanized installers.
CISA orders patch for exploited TrueConf flaws
CISA ordered US agencies to patch two exploited TrueConf flaws after compromised servers delivered malware to meeting participants.
US Lab Probes Chinese Lidar for Security Flaws
Idaho National Laboratory is investigating Chinese lidar systems for security vulnerabilities, funded by electric and autonomous vehicle companies.
From Awareness to Action: Building A Behavior-Based Security Program
New research shows organizations are moving from one-size-fits-all awareness training to behavior-based security programs that reinforce secure decisions, reduce risk, and improve workforce readiness.
Cisco Patches Nine Flaws, Five CVSS 10.0
Cisco released updates for Crosswork and Secure Workload, fixing nine vulnerabilities, five of which have a CVSS score of 10.0.