Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
CryptoJS Weak RNG Linked to $5.7M Wallet Drains
Coinspect found CryptoJS.lib.WordArray.random() weak RNG enabled theft of $5.7M from five crypto wallet apps since late May.
Connected Cars: Safety Boost or Hacker Playground?
Vehicle-to-vehicle communication promises safer roads, but spoofing attacks could cause collisions. Security must be built in from the start.
20 Zbtlink Wi-Fi Routers Found With Backdoor
Cybersecurity researchers found a backdoor in 20 Zbtlink Wi-Fi router models.
Zbtlink Routers Found with Backdoor, Downloads Halted
VulnCheck discovered a backdoor in Zbtlink routers, enabling remote root access.
Oracle SQL Injection Leads to SYSTEM Access via khunt
Attackers exploited a SQL injection flaw in a web app to access an Oracle database, then used the khunt toolkit to gain Windows SYSTEM privileges with
Agent Flaws in AWS, Google, Vercel Allow Tool Abuse
Security flaws in AWS, Google, and Vercel agent infrastructure let attackers trigger tools without model authorization, bypassing guardrails.
Agent-Assisted Rust OSS Vulnerability Research Results
A new pipeline, rust-in-peace, was tested on popular Rust open-source projects, uncovering vulnerabilities. Details are shared for defensive security.
Swiss govt SharePoint breach hits 200 accounts
Switzerland's BIT detected a SharePoint breach on July 28, compromising about 200 accounts.
TONTOU attack bypasses Spectre v2 fixes, leaks Linux hashes
Researchers bypass Spectre v2 mitigations on AMD and Intel CPUs with a TONTOU attack, leaking Linux kernel memory including password hashes.
Zbtlink Routers Ship With Backdoor Opening Root Shells
VulnCheck found a factory-shipped backdoor in 21 Zbtlink router firmware images, enabling unauthenticated root shell access and beaconing to Chinese s
Backdoor Found in Chinese Routers Sold Under Multiple Brands
A severe backdoor in routers from multiple brands phones home to Chinese servers, allowing remote control. It is the most blatant implant seen yet.
Zero-Click AI Browser Attacks Hit Claude, ChatGPT
Zenity found zero-click exploits in Claude and ChatGPT that hijack AI browsers via emails and X posts. Both remain unpatched.