Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Red Lion Controls N-Tron 700 Series
View CSAF Summary Successful exploitation of these vulnerabilities could allow a malicious user to access the device and gain administrative access. This access would allow the user to view, edit, and upload configuration files. Further, a malicious user can
Satel Netco Design
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary scripts in a user's browser, consume excessive system resources, enumerate files, create or modify files, and potentially execute arbitrary code. T
NIST Joins White House Effort to Drive ‘A New Golden Age of Science’
GAITHERSBURG, Md. The U.S. Department of Commerces National Institute of Standards and Technology (NIST) announces its support for the recommendations and principles established in the White House Of
NIST Publishes Reports on Open Radio Access Network (O-RAN) Security
NIST IR 8625 Open Radio Access Network (O-RAN) Near-Real Time RAN Intelligent Controller (RIC) Security The RAN Intelligent Controller (RIC) allows the RAN resources to configured, monitored and controlled to address specific use cases using
Uranium Finance hacker convicted over DeFi exploits and laundering
The conviction highlights the enduring vulnerability of DeFi platforms and the lengthy process of legal recourse, impacting user trust.
Cisco warns of critical flaws allowing Nexus switch takeover
Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary code with root privileges on Nexus switches.
Anthropic’s new budget model gets much better at ignoring hidden commands
Anthropic’s Claude Haiku 5.5 model, designed for quick, repetitive workloads and speed-sensitive tasks, is now better at finding vulnerabilities and writing exploits than its predecessor. The company has given it stricter cybersecurity safeguards than Haiku 4
How Technology Empowers—and Imperils—Dictators
This essay was written with Seva Gunitsky, and originally appeared in Foreign Affairs. Two weeks after Moscow’s full-scale invasion of Ukraine in March 2022, the Russian TV Channel One editor Marina Ovsyannikova burst onto the set of the evening newscast. She held up a hand-drawn sign behind t
TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws
SEC Consult has published technical details on vulnerabilities mentioned in a complaint filed by several US states.
Critical Flaw in Multiple Atlassian Products Exploited in the Wild
A critical vulnerability in Atlassian Data Center products is reportedly being exploited in the wild. The flaw, tracked as CVE-2026-21589, was described by Atlassian in an October 5 advisory as an a
Europol and US GAO Sound the Alarm Over Quantum Threats
Europes leading law enforcement agency and the US governments spending watchdog have both released reports this week urging organizations to accelerate their post-quantum cryptography (PQC) push. Co
What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor
ESET researchers traced almost two years of changes to MATCHBOIL, a downloader that the Russia-aligned group UAC-0099 uses to plant a second program on Windows machines in Ukraine. GUI displayed at MATCHBOIL’s runtime (Source: ESET) Every victim in ESET’s tel