Blog & Resources

Security awareness tips, phishing prevention guides, and best practices.

Vulnerabilities

VMware vCenter Flaw Exploited for Remote Access

Attackers are exploiting CVE-2026-59310, a critical directory-traversal flaw in VMware vCenter, to gain persistent remote access.

1 min read 7 views Aug 12
Vulnerabilities

Microsoft Patch Tuesday: 421 flaws, 3 zero-days

Microsoft's August 2026 Patch Tuesday fixes 421 vulnerabilities, including 62 critical and three zero-days.

1 min read 4 views Aug 12
Vulnerabilities

Chrome Security Feature Neutralizes Stolen Session Cookies

Google Chrome is testing a feature that binds session cookies to the device, making stolen cookies useless for account takeover.

1 min read 6 views Aug 12
Vulnerabilities

Iran-linked hacks target U.S. water facilities

Recent cyber attacks on U.S. water facilities, including Oregon's drinking water system, raise concerns about Iran-linked threats and prompt increased

1 min read 4 views Aug 12
Vulnerabilities

SAP Commerce Cloud Flaw Allows Arbitrary Code Execution

SAP patched a critical flaw in Commerce Cloud (Data Hub Adapter) that could let unauthenticated attackers execute arbitrary code.

1 min read 4 views Aug 12
Vulnerabilities

City-Forum Attacks Hit Salesforce, ServiceNow

A novel campaign exploits unauthenticated guest access in Salesforce and ServiceNow to enumerate and exfiltrate exposed data.

1 min read 5 views Aug 12
Vulnerabilities

China is shaping the future of open-source technology – including AI

Chinese AI companies such as Minimax made a big splash during the World AI Conference in Shanghai in July 2026. AP Photo/Ng Han Guan As you read this article on your computer or smartphone, you are

1 min read 6 views Aug 12
Vulnerabilities

NIST Seeks Input on AI-Ready NVD Modernization

NIST is modernizing the National Vulnerability Database to address AI challenges and increase automation. Public input is being sought.

1 min read 5 views Aug 12
Vulnerabilities

ShieldBreak PoC Bypasses Microsoft Defender Patch

Researcher Chaotic Eclipse released a PoC for ShieldBreak, a zero-day bypassing Microsoft Defender's patch for CVE-2026-50656, achieving SYSTEM access

1 min read 4 views Aug 12
Vulnerabilities

Plug and Pwn attacks abuse Windows PnP for SYSTEM access

Researchers unveiled Plug and Pwn attacks abusing Windows Plug and Play to install vulnerable vendor software, granting SYSTEM privileges via fake USB

1 min read 4 views Aug 12
Vulnerabilities

SonicWall: Professional Services Face Top Cyber Threats

SonicWall reports professional services firms face the highest attack volume, with 3 billion IPS events and ten ransomware families targeting privileg

1 min read 5 views Aug 12
Vulnerabilities

Coin-Sized Device Can Hack a Boeing 737

Researchers developed a coin-sized device that can hack a Boeing 737 by spoofing commands to its computers.

1 min read 5 views Aug 12

Want to learn more?

Start your free trial and see Phishlens in action.