Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Ex-NSA chief: Keep water system PLCs off internet
Retired Gen. Paul Nakasone urges higher standards for water systems after suspected Iran-linked hacks hit 12 states.
Bugtraq Mailing List Relaunched at DEF CON 34
Security researcher Jonathan Brossard revived the Bugtraq full disclosure mailing list at DEF CON 34, restoring a key platform for vulnerability discu
Polish Web Scan Finds Courts, Hospitals at Risk
Researchers scanned Poland's internet, finding thousands of public agencies, including courts and hospitals, vulnerable to cyberattacks.
Polish Researchers Find Thousands of Public Sites at Risk
Two Polish security researchers scanned the country's web and found thousands of public agencies, including courts, hospitals, and airports, exposed t
WordPress Pre-Auth XSS Flaw Allows PHP Code Execution
WordPress fixed CVE-2026-64638, a pre-auth reflected XSS in the login screen affecting all versions, which can lead to PHP code execution.
Water Watch Center launched to aid small utilities
A new program, the Water Watch Center, aims to help small water utilities defend against cyberattacks, amid Iran-linked intrusions on water infrastruc
Coldcard Hack Losses Exceed $111M
Galaxy Digital analyzed the Coldcard hack as losses surpass $111 million, highlighting firmware security flaws in hardware wallets.
Weak Passwords Exposed Water Supply to Iranian Hackers
Iranian hackers exploited weak passwords on internet-connected water systems, highlighting persistent default credential flaws.
Apple Releases Mac Security Updates to Fix 1 Flaw
Apple issued a security update for Macs to patch a single vulnerability. Experts advise immediate installation to protect your system.
N-able confirms N-central zero-day hit customer networks
Attackers exploited CVE-2026-18577 in N-able N-central, reaching customer networks. A second hotfix is required even after the first.
18-Year-Old Linux SCTP Flaw Allows Root and Container Escape
A use-after-free bug in Linux SCTP networking code, present since 2008, allows local users to gain root and escape containers. Patches are available.
MIT TONTOU attack bypasses Spectre defenses on Intel, AMD
MIT researchers developed TONTOU, a speculative execution attack using interrupt injection to re-poison branch predictors, bypassing Spectre v2 mitiga