Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Microsoft patches exploited max-severity Entra ID flaw
Microsoft fixed CVE-2026-69836, a critical Entra ID deserialization flaw exploited in attacks, allowing unauthenticated code execution.
Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI
This week's threats include RCE in Gogs 10.0 and n8n workflows, a $10M reward, and an AI exploit in GLM-5.
AI Exploit Scripts Target Siemens S7 PLCs
U.S. warns of active threat using AI-generated scripts to target Siemens S7 PLCs in critical infrastructure for reconnaissance and capability developm
China Cyberattack on US Water Utilities Simulated
Insurance executives simulated a Chinese cyberattack disabling 5,000 US water utilities, highlighting critical infrastructure risks.
Critical isolated-vm Flaw Allows Sandbox Escape
A critical flaw in isolated-vm, a popular sandbox library, lets attackers escape the isolated environment, potentially leading to remote code executio
Delta Flight Disrupted by Wi-Fi Hack
Dark Reading editors discuss overlooked news, including airplane Wi-Fi security risks and the US government's new 'hack back' strategy.
Critical NetScaler Flaw Bypasses Authentication
Citrix patched a critical authentication bypass in NetScaler ADC and Gateway, affecting certain FIPS and NDcPP builds.
Zimbra SNMP Flaw Exploited for RCE
CVE-2026-73570, a command injection in Zimbra Collaboration, is actively exploited for unauthenticated RCE. CERT Polska warns of in-the-wild attacks.
Researcher tricks Apple Find My into sharing location with
A researcher enrolled a Linux device into Apple's Find My network, tricking it into receiving location data shared with an Apple account.
N-able Passportal Bug Exposes Master Keys
A bug in N-able's Passportal password manager exposed master keys, and the cloud-based design remains risky even after patching.
Zombie Card Attack Revives Expired Visa Cards
Researchers revived expired Visa contactless cards for purchases by rewriting expiration dates via NFC, bypassing cryptography.
US warns of active cyber threat targeting critical
Federal agencies warn that hackers are actively targeting industrial control systems in U.S.