Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
CDN Tsunami Attack Amplifies DoS by 350x via HTTP/3
Researchers disclosed CDN Tsunami, two DoS attacks exploiting HTTP/3-to-HTTP/1.
NASA AIT-GUI Flaws Allow Unauthenticated Spacecraft Commands
Cycode disclosed critical flaws in NASA/JPL's AIT-GUI, enabling unauthenticated attackers to issue arbitrary commands to spacecraft systems.
Zimbra CVE-2026-73570 Exploited in Active Campaign
CERT Polska reports active exploitation of Zimbra Collaboration vulnerability CVE-2026-73570. Organizations using Zimbra should patch immediately.
US Warns of AI-Driven Attacks on Siemens S7 PLCs
US agencies warn threat actors use AI-generated scripts to target exposed Siemens S7 PLCs in critical infrastructure.
Hackers Compromise 14,000 IP Cameras in Ukraine, Russia
Operation CameraSwarm hacked 14,000 Dahua IP cameras, focusing on Russian and CIS telecom networks, exposing security flaws.
Axis Joins Palo Alto's Frontier AI Defense Program
Axis Communications becomes a founding partner in Palo Alto Networks' new Frontier AI Critical Defense Program to help organizations mitigate software
US warns hackers target water systems via Siemens devices
US security agencies warn that hackers are exploiting vulnerabilities in Siemens devices used in water systems, with AI aiding attacks.
US warns hackers targeting water systems via Siemens devices
CISA warns that hackers are exploiting vulnerabilities in Siemens devices used in water systems, with AI aiding attacks. Urges immediate patching.
Atlassian, Splunk Patch Critical Vulnerabilities
Atlassian and Splunk released patches for dozens of critical and high-severity vulnerabilities that could allow code execution, data access, and privi
MLflow Flaw Exploited for Cloud Credential Theft
A critical MLflow vulnerability lets attackers access internal endpoints and steal cloud credentials. Exploitation has been observed in the wild.
Johnson Controls Simplex Flaw Exposes Credentials
A vulnerability in Johnson Controls Simplex Incident Manager lets local low-privilege attackers extract user credentials from memory, risking unauthor
Cisco Patches Critical Crosswork, Secure Workload Flaws
Cisco fixed critical vulnerabilities in Crosswork and Secure Workload that could allow remote code execution, authentication bypass, and path traversa