Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
CSS in Webmail Can Exfiltrate Data, Researchers Warn
Researchers warn that CSS in webmail can be abused to exfiltrate data, and some vendors are unprepared for this threat.
Iranian Hackers Target U.S. Water Supply
Federal and state officials are responding to suspected Iranian cyberattacks on U.S.
Samsung Bixby Exploit Chain: $50K Flaws in Members, Account
Researchers discovered a $50,000 exploit chain in Samsung Members and Account apps, enabling attackers to abuse Bixby and compromise devices.
15 TP-Link Bugs Expose Provisioning Risks
Researchers found 15 vulnerabilities in TP-Link devices, enabling attackers to compromise networks via automated provisioning flaws.
Critical Langflow RCE flaw under active attack; patch now
CISA added CVE-2026-9198 to its Known Exploited Vulnerabilities catalog after active exploitation.
Google Patches Python APK Flaws Enabling Agent-to-Agent
Google fixed vulnerabilities in its APK for Python that allowed an AI agent to exploit a trust boundary and trigger supply chain compromise via agent-
OVSwrap Linux Kernel Flaw Lets Local Users Gain Root
CVE-2026-64531 in Linux kernel's Open vSwitch datapath allows local privilege escalation to root. A public exploit targets about 800 kernel builds.
WebKit leak exposes iPhone and Mac users' IPs
A WebKit privacy leak bypasses proxy protection and iCloud Private Relay, exposing real IP addresses and DNS data on Apple devices.
Critical Gitea Flaw Allows Unauthenticated File Read
Gitea versions 1.22.1 to 1.27.0 have a critical file-read vulnerability (CVE-2026-59774, CVSS 9.
Leaked n8n API Tokens Expose 321 Live Instances
GitGuardian found 4,576 exposed n8n API tokens in public GitHub commits, with 321 live instances accepting them, enabling credential theft without sof
Khunt toolkit deployed in Oracle DB via SQL injection
Attackers exploited a SQL injection flaw in a Java app to install the khunt toolkit in an Oracle database, gaining SYSTEM access and stealing credenti
CISA Adds Langflow, Tomcat, N-able Flaws to KEV
CISA added Langflow, Apache Tomcat, and N-able N-central vulnerabilities to its Known Exploited Vulnerabilities catalog, indicating active exploitatio