Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Trivy, Not LiteLLM, Behind 2,500 Org Compromise
A Trivy vulnerability, not LiteLLM, caused the compromise of 2,500 organizations. Over 95% were exposed before malicious LiteLLM packages appeared.
macOS Screen Sharing flaw exploited for Monero mining
Hackers exploit CVE-2026-65400 in macOS Screen Sharing to gain root access and deploy Monero miners on systems with port 5900 exposed.
OAuth Tokens Emerge as New Entry Point in Workspace Attacks
Attackers now use stolen OAuth tokens to access Google Workspace, bypassing email as the initial entry point.
Max severity SAP Commerce Cloud flaw now targeted in attacks
SAP Commerce Cloud RCE vulnerability CVE-2026-58231 is being exploited in the wild just three days after patching, with no public PoC.
AMD 2015 CPUs: One Bit Unlocks PSP and Hidden Memory
A single instruction on AMD 15h/16h CPUs disables memory protections, exposing PSP, microcode, and SMI to attackers.
Hackers Exploit Unpatched GeoServer Zero-Day
Attackers are exploiting an unpatched SQL injection flaw in GeoServer, potentially enabling remote code execution.
Hackers Target U.S. Water Supplies in 7 States
Cyberattacks hit water providers in at least seven U.S. states over two weeks, per FBI and EPA.
GeoServer Zero-Day Exploited for RCE
A zero-day SQL injection flaw in GeoServer is actively exploited, enabling remote code execution. No CVE or patch exists yet.
Midnight Blizzard Hits Hotel Wi-Fi DNS
North Carolina ports revert to paper after cyberattack. Midnight Blizzard compromises hotel Wi-Fi DNS, stealing credentials via captive portals.
Global Campaign Exploits Critical VMware vCenter Flaw
Attackers are actively exploiting CVE-2026-59310 in VMware vCenter, and patching alone may not fully mitigate the threat.
CISA Rule Changes: Is Your Vulnerability Program Ready?
CISA has updated its rules, and nearly half of breached organizations were hit through their own vulnerabilities. Ensure your program adapts.
Adobe Commerce CVE-2026-71362 Exploited After Disclosure
Attackers are exploiting a critical Adobe Commerce vulnerability, CVE-2026-71362, shortly after disclosure, enabling account hijacking and data access