Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
cPanel Patches Critical SQL Flaw Allowing Root Database
cPanel fixed CVE-2026-58048 (CVSS 9.4) letting authenticated customers run SQL as database root, plus two other boundary-crossing issues.
Google Synced Passkeys Hijackable by Malware
Unit 42 found three attack vectors allowing local malware on Windows to hijack Google-synced passkeys, bypassing biometric and PIN checks.
Apple caps bug bounty reports amid AI spam flood
Apple is limiting open bug bounty reports per researcher to handle a surge of low-quality, AI-generated submissions overwhelming its security team.
Mozilla Patches Firefox and Thunderbird Flaws
Mozilla released security updates for Firefox and Thunderbird, including ESR versions, fixing multiple vulnerabilities. Users should update promptly.
Iran Suspected in Cyberattacks on US Water Systems
Cyber intrusions hit water utilities in 12 US states, with Iran as the prime suspect, according to sources.
15 attackers exploited Coldcard vulnerability: Galaxy
At least 15 attackers exploited a Coldcard vulnerability, according to Galaxy Digital's head of research, Alex Thorn, citing new victim reports since
Tennessee congressional hopeful accused of shooting license
An independent congressional candidate in Tennessee faces four felony vandalism charges after allegedly shooting four automated license plate reader (
Apple Caps Bug Reports After AI Slop Flood; $200K Exploit
Apple limited per-researcher bug reports after AI-generated submissions surged.
NewNormal Releases Free NewScan Pentest Scanner
NewNormal Security launched NewScan, a free local pentest scanner for APIs, web apps, network, Wi-Fi, and segmentation, with reduced false positives.
Cyberattacks hit 9 Michigan, 30+ Minnesota water systems
Michigan confirmed attacks on nine water systems, and Minnesota reported over 30 affected. Federal investigators are probing control system tampering.
AI Meeting Tool tl;dv Exposes Video Calls via Firebase Flaw
A Google Firebase misconfiguration in AI notetaker tl;dv allowed users to access other users' meeting data and potentially join calls, risking governm
CISA Adds Actively Exploited N-able N-central Flaw to KEV
CISA has added CVE-2026-18577, a high-severity flaw in N-able N-central, to its Known Exploited Vulnerabilities catalog following reports of active ex