Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Malicious SIM Cards Can Hijack Cellular IoT Devices
Researchers found that malicious SIM cards can execute attacker commands on cellular modules in IoT devices, potentially taking them over.
Mozilla Revokes Firefox, Thunderbird Linux Signing Key
Mozilla revoked the cryptographic key for Firefox and Thunderbird Linux downloads after an unencrypted copy was accidentally committed to a private re
Adobe Urges Patching of Critical ColdFusion Flaws
Adobe warns of critical vulnerabilities in ColdFusion and Campaign Classic that could allow arbitrary code execution and denial-of-service.
CISA: SharePoint flaw CVE-2026-45659 exploited in ransomware
CISA confirms ransomware groups are exploiting CVE-2026-45659, a high-severity RCE flaw in Microsoft SharePoint Server.
CISA: SharePoint flaw now used in ransomware attacks
CISA confirmed ransomware gangs are exploiting CVE-2026-45659, a high-severity SharePoint RCE flaw actively exploited since July.
Iran-Linked Hackers Hit US Water Systems in 12 States
Iran-linked hackers targeted water infrastructure in New Jersey and Alabama, bringing confirmed attacks to at least 12 states with limited disruption.
USB Auto-Install Flaw Leads to SYSTEM Takeover on Windows 11
Researchers chained Windows Plug and Play USB auto-install to achieve SYSTEM access on fully updated Windows 11, even via Remote Desktop with USB redi
AI Genie in the Wild
When I give talks about AI genies, I use this sort of example as a hypothetical. It’s happened. The story is from Australia. Someone named Andrew tasked OpenClaw to book gym classes for him. And…. Minutes later, his AI agent reported it had discovered a way to book Andrew into classes se
Zoom Patches Zero-Click Code Execution Vulnerability
Impacting Zoom annotation, the bug could be exploited by a meeting participant to execute code on another participant’s machine.
Cisco warns of ASA, FTD VPN flaw exploited to crash devices
Cisco warns that CVE-2026-20349, a high-severity DoS flaw in ASA and FTD software, is actively exploited to crash devices via crafted HTTP requests to
Windows 10 KB5120249 August 2026 Patch Tuesday update
Microsoft released Windows 10 KB5120249 for 22H2 and 21H2, fixing File History backup errors and expanding Secure Boot certificate rollout.
SAP Patches Critical Code Injection, Memory Corruption Flaws
SAP released 28 new and two updated security notes, including four critical-severity fixes for code injection and memory corruption vulnerabilities.