Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
New Attack Surfaces Found in Google's Synced Passkey
Researchers found novel attack classes against Google's synced passkeys and Cloud Authenticator, potentially undermining passwordless security.
Hackers hit 30+ Minnesota water systems in July 2026
Cyberattacks targeted over 30 municipal water systems in Minnesota, including Plymouth, exposing critical infrastructure weaknesses.
Ledger Warns Coldcard Exploit Shows Wallets Must Adapt
Ledger warns that the Coldcard exploit signals a need for hardware Bitcoin wallets to adapt to AI-driven threats, while confirming its own devices wer
Coldcard Firmware Bug Compromises Bitcoin Key Entropy
A firmware bug in Coldcard Bitcoin hardware wallets compromised entropy generation, potentially allowing attackers to predict private keys.
Chainguard Joins AWS Security Hub as Supply Chain Partner
Chainguard is now a supply chain partner in AWS Security Hub Extended, offering malware-free open source packages rebuilt from verified source.
SharePoint Flaws Hit Swiss Federal IT Agency
Swiss FOITT reported attackers exploited SharePoint vulnerabilities, compromising about 200 accounts and forcing server rebuilds.
Apple Restricts Bug Bounty After AI Fake Reports
Apple has limited bug bounty submissions due to a surge in AI-generated fake vulnerability reports, as reported by the Financial Times.
Coldcard Bitcoin Wallets Drained in Entropy Exploit
Bitcoin wallets on Coldcard hardware wallets were drained despite being offline, due to an entropy and key generation exploit.
Coldcard Bug Weakens Bitcoin Seed Entropy
A Coldcard firmware bug caused Bitcoin wallets to generate seeds with reduced entropy, potentially compromising key security.
TP-Link patches 15 Omada ZTP flaws enabling network breaches
TP-Link patched 15 vulnerabilities in Omada's zero-touch provisioning, chained with prior CVEs for remote code execution.
CISA adds N-able N-central flaw to KEV; 3-day patch deadline
CISA added CVE-2026-18577 to its KEV catalog, requiring federal agencies to patch within 3 days.
Microsoft pays record $20M bug bounty amid AI-driven
Microsoft paid over $20 million in bug bounties to 562 researchers in the 2025-2026 program year, a record.