Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
CISA Adds 4 Critical Flaws to KEV Catalog
CISA added four critical vulnerabilities to its Known Exploited Vulnerabilities catalog, including macOS, SharePoint, vCenter, and Microsoft IKE flaws
U.S. warns Siemens devices can be hacked amid Iran war
U.S. agencies warn unidentified hackers are targeting Siemens devices used in water facilities and critical infrastructure, amid Iran war threats.
Linux Foundation's Akrites to Launch in September
The Linux Foundation's Akrites platform, designed to defend critical open-source software from AI-enabled threats, will go live in September.
Harness launches AI agents to triage and patch
Harness introduced AI agents that detect software vulnerabilities and generate patches, which developers must approve before deployment.
81M Azure Login Attempts Expose MFA Blind Spot
A password-spraying campaign made 81 million Azure login attempts, compromising 78 accounts by bypassing MFA.
Researchers Hack Microsoft Copilot via CoSnitch Flaws
Varonis found CoSnitch, a chain of vulnerabilities in Microsoft Copilot that allows data leakage via malicious URLs and memory poisoning.
Hackers compromise 14,500 Dahua cameras in 35-day campaign
Hackers compromised over 14,500 Dahua IP cameras in a 35-day campaign using brute force, exploits, and cloud-relay attacks.
US warns of AI-powered attacks on Siemens PLCs
US agencies warn of ongoing AI-assisted attacks exploiting Siemens S7 PLCs in critical infrastructure, targeting sectors like energy and water.
Hexaware Launches Zero Vulnerability Amid AI Pressure
Hexaware Technologies introduces Zero Vulnerability, a security offering to help enterprises remediate and verify vulnerabilities in production as AI
Hexaware Launches Zero Vulnerability Amid AI Pressure
Hexaware Technologies introduces a new security offering to help enterprises remediate vulnerabilities faster, addressing the rising volume of finding
Clop-Linked Windchill Web Shell Maps Vaults
ReliaQuest found a JSP web shell tied to Clop that exploits PTC Windchill and FlexPLM flaws to decrypt credentials and map engineering data.
CISA Urges Patching of Microsoft, VMware, Apple Flaws
CISA warns of actively exploited vulnerabilities in Microsoft, VMware, and Apple products, urging immediate patching to prevent remote code execution