Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
New Passkey Attacks Bypass MFA Protections
Researchers demonstrated three attacks that recover synced private keys or bypass phishing-resistant MFA, without breaking passkey cryptography.
BdThemes supply-chain hack creates rogue WordPress admins
Attackers poisoned BdThemes' remote JSON feed, exploiting an XSS flaw to create hidden admin accounts and install webshells on WordPress sites.
iPhone Exploit Chains Spread to Cybercrime Groups
Sophisticated iPhone exploit chains, once nation-state exclusive, are now proliferating among organized cybercrime groups globally.
TrueConf Flaws Exploited to Deploy PhantomCore
Head Mare exploits TrueConf server flaws to replace client installers with PhantomCore, targeting Russian firms across multiple sectors.
Hackers Breach Polish CHP Plant via Fortinet and APN
Attackers used a Fortinet device and private APN to reach PLCs at a Polish CHP plant, disrupting turbines and water treatment.
Cyber Agencies Flag Healthcare Router Risks
Federal agencies list healthcare as at-risk due to weak router configurations, urging checks on specific controls.
Royal Navy Drone Cameras Found Sending Data to China
A routine cyber sweep found Royal Navy drone cameras transmitting heartbeat signals to a Chinese IP.
Cisco Warns of High-Severity ClamAV Flaws With Public PoC
Cisco disclosed high-severity ClamAV vulnerabilities that allow remote, unauthenticated attackers to cause denial-of-service.
Framework laptop maker breached via Metabase zero-day
Framework suffered a data breach after attackers exploited a Metabase zero-day vulnerability, compromising customer data.
Iran-linked hackers hit US water facilities in 12 states
Iran-linked hackers targeted industrial control systems at water facilities in at least a dozen US states, including New Jersey and Alabama.
N-able ships second N-central hotfix for CVE-2026-18577
N-able released a second hotfix for N-central to address ongoing exploitation of CVE-2026-18577.
Weekly Vulnerability Summary: August 3, 2026
CISA released its weekly vulnerability summary for August 3, 2026, listing high-severity flaws. One notable issue is in @fastify/aws-lambda version 6.