Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Cisco ASA and FTD Flaw Exploited in the Wild
Cisco warns that CVE-2026-20349, a high-severity flaw in ASA and FTD software, is being exploited in the wild, allowing unauthenticated remote DoS att
Lazarus exploits Windows zero-day in defense attacks
North Korean Lazarus group exploited CVE-2026-68820, a Windows AFD.sys zero-day, in Operation Dream Job targeting defense firms.
July 2026 Threat Report: Critical Flaws in WordPress,
July 2026 saw active exploitation of critical vulnerabilities in WordPress Core, Adobe ColdFusion, and Check Point SmartConsole, posing significant ri
Intel, AMD Patch 80+ Vulnerabilities
Intel and AMD released patches for over 80 vulnerabilities, including high-severity flaws enabling privilege escalation and code execution.
Zoom Annotation Flaw Enabled Silent Device Takeovers
A Zoom annotation bug allowed remote device takeover on Android and iOS without user interaction. Researchers exploited it using public tools.
Open Channels FM: WordPress Vulnerabilities and WordCampUS
Open Channels FM discusses open source changes, WordPress vulnerabilities, and community conversations from WordCampUS.
Microsoft patches 400+ flaws, zero-day exploited
Microsoft's August 2026 Patch Tuesday fixes over 400 vulnerabilities, including one zero-day under active attack (CVE-2026-68820) and three publicly d
Iran-linked hacks target U.S. water facilities
A water pump failure in Braham, Minn., is linked to a suspected Iranian cyberattack on U.S.
Windows Zero-Day Exploited in North Korean Attacks
A new Windows zero-day was exploited in North Korean cyberattacks, allowing full system control and deployment of the ForestTiger backdoor.
Crytica RDAi Detects OT Device Tampering
Crytica Security's patented RDAi solution provides rapid, deterministic threat detection for operational technology, safeguarding critical infrastruct
SharePoint CVE-2026-55040 exploit used in attacks
A PoC for a critical SharePoint auth bypass is already weaponized. Over 8,500 servers are exposed online.
Ivanti EPM Update Patches Remotely Exploitable Flaws
Ivanti Endpoint Manager (EPM) has been updated to fix remotely exploitable vulnerabilities that could leak SQL credentials or crash an agent service.