Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Chrome 151 Patches Critical Memory Safety Flaws
Google's Chrome 151 update fixes over two dozen memory safety bugs, including critical use-after-free vulnerabilities.
FBI Warns of Hacks on U.S. Water Systems
The FBI reported cyberattacks on water systems in seven states, degrading operations, following years of warnings about sector vulnerabilities.
Zapscape KVM Flaw Lets L1 Guest Escape to Host
CVE-2026-64561 in KVM/x86 shadow MMU allows privileged L1 guest code to escape to Linux hosts when nested virtualization is enabled.
Cisco Patches 12 SD-WAN and IOS XE Flaws
Cisco fixed 12 vulnerabilities in Catalyst SD-WAN and IOS XE, including three with a CVSS score of 9.8, found during an internal review.
Interrupt Injection Attack Bypasses Spectre v2 Defenses
MIT CSAIL researchers found a new attack that times hardware interrupts to bypass Spectre v2 mitigations on Intel and AMD CPUs.
Kids' Smartwatch Hijacked to Stalk Owner
A cheap kids' smartwatch sold by CJC had vulnerabilities that let hackers hijack it to stalk the wearer, highlighting risks in low-cost IoT devices.
AI patches only 26% of vulns cleanly, study finds
1Password's Off-by-1 Labs found frontier LLMs fix vulnerabilities cleanly only 26% of the time, often altering behavior or failing.
Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor
This week's threats include remote code execution, a Samsung one-click takeover, and an iCloud backdoor dispute, highlighting cheap attack leverage.
Researcher Claims Control of ChatGPT Secure Sandbox
At Black Hat USA 2026, a researcher demonstrated a proof-of-concept attack chain giving C2-style influence over ChatGPT's isolated sandbox.
NJ Water Systems Hacked; 12 States Now Hit
Two New Jersey municipal water systems were cyberattacked via exposed industrial control systems, bringing the total affected states to twelve.
Alinto SOGo XSS Flaw Allows RCE via ICS Invites
Alinto SOGo v5.12.7 has an XSS vulnerability via malformed ICS calendar invitations, enabling remote code execution through malicious SVG objects.
4,400+ Rockwell PLCs Exposed Online
Forescout found 4,407 internet-facing Rockwell PLCs, including 22 in cities hit by water utility attacks. Exposure doesn't confirm compromise.