Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Password spraying attacks surge 155x as hackers exploit MFA
Huntress reports a 155x surge in password spraying attacks, exploiting MFA gaps via legacy ROPC flow.
US Water Systems Under Attack, Not Ready
America's water systems face cyberattacks, but the nation lacks preparedness.
Oracle August 2026 Update: 943 Patches, 460+ RCEs
Oracle's August 2026 Critical Patch Update addresses over 1,000 vulnerabilities across 24 products, including more than 460 remotely exploitable flaws
Chrome, Firefox Updates Patch Dozens of Vulnerabilities
Updates for Chrome and Firefox fix dozens of security flaws, including risks of code execution, privilege escalation, sandbox escape, and information
CISA Adds Apple, Microsoft, VMware Flaws to KEV Catalog
CISA added Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE vulnerabilities to its Known Exploited Vulnerabilities catalo
Microsoft fixes Windows Defender crash bug
Microsoft resolved a bug causing Windows Defender to crash with 0xc0000005 errors after a security update. The fix is in signature update 1.457.236.
CISA: Windows IKE RCE flaw CVE-2026-33824 exploited
CISA warns that CVE-2026-33824, a critical RCE in Windows IKE Extension, is actively exploited. All supported Windows versions are affected.
Microsoft Copilot Flaws Allow One-Click Data Theft
Varonis found three Copilot Personal flaws, named CoSnitch, enabling one-click data exfiltration from connected apps via crafted links.
Attackers Exploit MLflow SSRF Flaw to Steal Cloud
Critical vulnerabilities in MLflow and FUXA are under active exploitation, allowing attackers to steal cloud credentials and secrets.
Researchers Revive Expired Visa Contactless Cards for
UMass Amherst researchers found a way to make expired Visa contactless cards work for payments via NFC proxy attacks, exploiting a lack of cryptograph
GitLab Zero-Click Flaw Hard to Detect
GitLab's CVE-2026-19478 zero-click flaw lacks technical details, complicating detection for self-managed users.
Microsoft Copilot flaw enables silent data theft
A hidden parameter bypasses Copilot's prompt-approval safeguard, allowing attackers to run commands in a victim's session. Tracked as CVE-2026-32193.