Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
FBI Probes Iranian Cyberattacks on US Water Systems
Suspected Iranian hackers hit water utilities in at least 12 states, causing monitoring failures.
Skipping Windows Updates Risks WannaCry-Style Attacks
Unpatched Windows systems remain vulnerable to ransomware like WannaCry, which exploited a flaw Microsoft fixed in March 2017.
Passkey Security Flaws Could Enable Account Takeover
Palo Alto Networks Unit 42 found passkey bypass methods that could allow account takeover, raising concerns for enterprises adopting passkeys.
Passkey Security Under Threat From Malware
Palo Alto Networks Unit 42 reveals attackers can bypass passkey protections with malware, raising concerns for enterprise adoption.
AI agent frameworks hit by 11 old-style flaws
Check Point discovered 11 vulnerabilities, including critical ones, in LangChain, CrewAI, and Microsoft Agent Framework, caused by classic bugs like i
AI Browsers Face Zero-Click Hijack via 'PleaseFix'
Researchers discovered 'PleaseFix', a zero-click attack that hijacks AI browser agents via malicious content, with no simple fix available.
OpenAI Atlas Browser Flaws Allow WhatsApp Spam
Researchers found security bypasses in OpenAI's Atlas browser that could let attackers spam WhatsApp contacts or make unauthorized Amazon purchases.
Backdoor Found in Zbtlink Routers
VulnCheck discovered a hidden backdoor in 20 Zbtlink router models, posing a security risk to users.
AWS Continuum integrates with Anthropic and OpenAI tools
AWS partners with Anthropic and OpenAI to embed Continuum, a code vulnerability tool, into Claude Code and Codex developer tools.
Iranian Hackers Target Water Utilities via Default Passwords
Iranian hackers exploited default passwords on small computers controlling water pumps and valves, targeting U.S.
Paperclip AI Flaws Allow Remote Command Execution
Two vulnerabilities in Paperclip, an open-source AI agent control plane, allow remote command execution via malicious agent imports.
Veeam, Terraform MCP, Django Patch Critical Flaws
HashiCorp, Veeam, and Django patched 11 vulnerabilities, including a CVSS 10.0 cross-tenant flaw in Terraform MCP Server and a 9.