Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Critical GitLab Flaw Allows Unauthenticated Project Deletion
GitLab patched CVE-2026-19478, a critical flaw allowing unauthenticated attackers to modify or delete public projects. CVSS 9.4.
Snowflake GitHub Actions Flaw Allows Command Injection
Wiz disclosed a GitHub Actions workflow injection in Snowflake's snowflake-connector-net repo, exploitable via crafted issues to run commands with int
Forminator WordPress Flaw Allows Unauthenticated RCE
Critical CVE-2026-15748 in Forminator Forms (600k+ installs) enables unauthenticated remote code execution via malicious PHP uploads. CVSS 9.8.
Video Call Exploit Chains Two Flaws in Unisoc Modems
Researchers combined two Unisoc modem vulnerabilities to remotely take over Android devices via a video call, requiring the victim to answer.
Zero-Day macOS Flaw Actively Exploited
Dutch NCSC reports active exploitation of a macOS sharing feature zero-day, granting attackers full system control.
Weekly Recap: VMware, Windows 0-Day, MCP Attacks
This week's cybersecurity news highlights VMware exploits, a Windows 0-day, MCP attacks, and browser hijacks, emphasizing risks from exposed services
AI Agent Exploits Snowflake Bug, Credentials Stolen
Wiz's AI agent found and exploited a script injection flaw in Snowflake's GitHub Actions, stealing Jira credentials.
LiteLLM Supply-Chain Attack Hits 2,038 Repos
The SANDCLOCK backdoor in LiteLLM exposed credentials across 2,038 repositories, hitting technology, banking, and healthcare hardest.
Unisoc VoLTE Exploit Chain Grants Full Android Kernel Access
SSD Secure Disclosure published a two-stage exploit chain achieving full Android kernel access via Unisoc modem VoLTE video calls, with no fix from th
macOS Screen Sharing Flaw Enables Cryptojacking
CVE-2026-65400 in macOS Screen Sharing is exploited for cryptojacking, letting attackers gain root via port 5900 and deploy XMRig Monero miners.
Boeing 737 Hackable in Under a Minute, Study Warns
Researchers warn that attackers could take over a Boeing 737 in under a minute using a tiny device, highlighting critical aviation security flaws.
ShieldBreak bypasses Microsoft Defender patch
A newly disclosed Microsoft Defender flaw, ShieldBreak, bypasses a recent patch, showing that fixing one attack path doesn't close all routes.