Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
China APT Exploits VMware vCenter Flaw, Deploys Babuk
A suspected China-nexus APT exploited CVE-2026-59310 in VMware vCenter to deploy Babuk-derived ransomware.
AI drives record patch volumes, future uncertain
Microsoft's monthly security fixes jumped from 60-90 to over 600 in July, driven by AI-assisted bug hunting and code generation.
Certighost: AD CA Flaw Lets Low-Priv Users Become DCs
CVE-2026-54121 in AD CS lets low-privileged users forge Domain Controller certificates, enabling full domain compromise.
macOS Screen Sharing Flaw Exploited for Root Access
Attackers exploited a macOS Screen Sharing vulnerability to gain root access and deploy a Monero miner on affected systems.
SAP Commerce Cloud Flaw Exploited 3 Days After Disclosure
CVE-2026-58231 in SAP Commerce Cloud allows arbitrary code execution and was exploited within 3 days of disclosure.
SafePal Flaw Exposes 39,798 Customers' Order Data
SafePal disclosed an authorization flaw in its order-tracking plug-in that exposed personal and purchase details of nearly 40,000 customers.
Windows 11 Security Bypassed by Researchers
Researchers found a way to bypass Windows 11's strongest defenses without physical access, assuming prior compromise.
Microsoft patches Defender ShieldBreak zero-day
Microsoft is working on a patch for CVE-2026-69414, a Defender privilege escalation flaw named ShieldBreak that grants SYSTEM privileges.
Microsoft blames AI for delayed Exchange SE CU1
Microsoft delays Exchange Server SE Cumulative Update 1, citing AI-driven vulnerability discovery and a security-first policy.
Chinese AI company Zhipu claims its new is a better bug-finder than Anthropic, OpenAI
ASIA IN BRIEF Chinese company Zhipu last week launched a new AI model called GLM-5.3 that it claims has bug-finding powers that match those possessed by American models. The company’s announcement includes benchmark data that finds GLM-5.3 beats Fable 5 and GPT-5.6 Sol on the CyberGym benchmark, a t
Salesforce, ServiceNow portals exposed 17 months; Metabase
Salesforce and ServiceNow portals were exposed for 17 months, and a Metabase 0-day was exploited.
SAP Commerce Cloud CVE-2026-58231 Exploited in Wild
Attackers are actively exploiting a critical SAP Commerce Cloud vulnerability, CVE-2026-58231 (CVSS 10.0), days after SAP released a patch.