Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3
Microsoft's August 2026 Patch Tuesday addresses 400 flaws, including one actively exploited zero-day and two publicly disclosed ones.
Zoom flaw allowed device takeover via AI-assisted discovery
A Zoom vulnerability, found using AI in under 20 prompts, could let attackers remotely execute code on devices across all supported platforms.
Windows 11 August 2026 Patch Tuesday fixes 400 flaws
Microsoft released Windows 11 KB512103 and KB5120240 cumulative updates for versions 25H2/24H2 and 23H2, patching 400 vulnerabilities and adding featu
Mozilla revokes Firefox signing key after GitHub leak
Mozilla revoked a Firefox/Thunderbird signing key after an unencrypted copy was committed to a private GitHub repo. No unauthorized access found.
Picus: Defenses Block Only 37% of Post-Compromise Actions
Picus Security analyzed over 338 million attack simulations, finding that defenses block only 37% of post-compromise attacker actions, with gaps in ra
New Pass-ta-key Attack Targets Passkey Security
Researchers reveal Pass-ta-key attacks that can recover synced private keys or bypass phishing-resistant MFA, exposing unknown passkey weaknesses.
Hackers Breach Polish Power Plant via Cellular Network
Attackers shut down a steam turbine and water treatment at a Polish CHP plant via its private cellular network, affecting 50,000 residents.
Head Mare APT exploits TrueConf flaws to drop backdoors
Kaspersky found malicious TrueConf installers used by Head Mare APT to exploit unpatched server vulnerabilities and deliver PhantomCore and PhantomGra
Malicious SIMs can leak data, crash phones, drop 5G to 2G
Researchers found malicious SIMs can exploit proactive SIM commands to leak files, crash devices, and downgrade connections to 2G, affecting nine of 2
BdThemes Supply Chain Attack Creates Rogue WordPress Admins
A supply chain attack on WordPress plugin vendor BdThemes poisoned JSON data to create rogue admin accounts. Downloads were temporarily disabled.
AI Finds Windows Flaws Faster Than Microsoft Can Fix
Microsoft reports AI helps hackers discover Windows vulnerabilities faster than the company can patch them, raising security concerns.
Mozilla rotates GPG key after GitHub exposure
Mozilla updated its GPG signing key for Firefox and Thunderbird after an unencrypted copy was exposed on GitHub. No unauthorized access was found.