Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
AI Drives 36% Surge in Disclosed Vulnerabilities
Beazley Security reports a 36% rise in disclosed vulnerabilities in Q2, driven by agentic AI, while exploitations grew only 10%.
Siemens Simcenter Nastran Stack Overflow Flaw
Siemens Simcenter Nastran has a stack overflow vulnerability triggered by a malicious file argument, potentially allowing code execution.
CISA Malcolm Flaws Allow DoS or Code Execution
CISA warns of vulnerabilities in Malcolm that could let attackers cause denial-of-service or execute arbitrary code.
300K WordPress Sites at Risk From Form Plugin Flaw
A critical arbitrary file upload vulnerability (CVE-2026-15748) in a WordPress form plugin could expose 300,000 sites to hacking.
CISA orders 3-day patch for Ray AI flaw under attack
CISA added a Ray AI framework vulnerability to its Known Exploited Vulnerabilities catalog, confirming active exploitation and ordering federal agenci
Prevention Scores Mask Weak Spot: Mimikatz Block Rate Drops
Picus Blue Report 2026 shows prevention effectiveness rose to 69%, but behavioral testing reveals gaps.
GitLab Patches Critical Code Injection Flaw
GitLab fixed a critical code injection vulnerability allowing unauthenticated attackers to modify or delete user data and public projects.
BitBox patches severe wallet flaws risking funds
BitBox released a firmware update fixing two severe vulnerabilities that could allow malicious firmware installation and put user funds at risk.
CISA Adds Ray-Project Ray Flaw to KEV Catalog
CISA added a Ray-Project Ray vulnerability to its Known Exploited Vulnerabilities catalog, indicating active exploitation.
Apple Patches Dozens of WebKit Flaws in macOS, iOS Updates
Apple's latest macOS and iOS updates fix numerous WebKit vulnerabilities that could crash Safari, corrupt memory, leak data, or escape the sandbox.
CISA: Windows Task Host flaw now exploited by ransomware
CISA confirmed ransomware gangs are exploiting CVE-2025-60710, a Windows Task Host privilege escalation flaw patched by Microsoft in November 2025.
Microsoft removes WMIC tool abused by cybercriminals
Microsoft removed the WMIC command-line tool from Windows 11 24H2 and 25H2, aiming to block malware tactics that abused it.