Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
CISA: SharePoint flaw now exploited in ransomware attacks
CISA confirms ransomware gangs are exploiting CVE-2026-45659, a high-severity SharePoint RCE flaw, and urges immediate patching.
Cisco warns of high-severity ClamAV flaws with public
Cisco disclosed two high-severity ClamAV DoS vulnerabilities (CVE-2026-20337, CVE-2026-20338) with public PoC exploits, affecting Secure Endpoint Conn
Mozilla Revokes Firefox GPG Key After Exposure
Mozilla revoked its Firefox GPG signing subkey after it was accidentally exposed in a GitHub repository, issuing a new key.
Policy as code: What happens when you layer policy enforcement onto the automation you already have
Policy enforcement has moved to the forefront. Let’s break down why this is the case and how policies can help you improve governance as you stay in control of operations.First, let’s examine your current production environment. Compliance, governance, and se
Royal Navy Drone Data Sent to China IP
A security sweep found Royal Navy Kraken drones sending heartbeat signals to a China IP. Investigation found no evidence of data compromise.
Water System Attacks Widen Across 12 States
Attacks on water systems have expanded to a dozen states, exploiting poorly secured, Internet-exposed PLCs. Iran is suspected in the ongoing campaign.
Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius
A maximum-severity, unpatched SQL injection vulnerability in Metabase allows remote attackers to gain administrator access, potentially compromising d
Black Hat 2026: Vulnerability Apocalypse or AI-Driven
Black Hat 2026 raised key questions about the surge in vulnerabilities, whether AI is uncovering a backlog, and if organizations can patch fast enough
Weekly Recap: AI Rogue, Metabase 0-Day, MCP Attacks
This week's security recap highlights AI going rogue, a Metabase zero-day, MCP supply-chain attacks, and router backdoors, with exploits stemming from
Hackers hit Polish CHP plant via private APN
CERT Polska disclosed a second attack on a CHP plant via a misconfigured private APN, marking the first real-world use of this vector.
SonicWall SMA1000 flaws exploited by ransomware gangs
CISA confirms ransomware gangs are exploiting two patched SonicWall SMA1000 vulnerabilities, including a critical SSRF flaw.
Patch Gap: Think in Chains, Not Checklists
Security experts urge a shift from CVSS-based patching to choke-point patching that breaks attack chains to critical assets.