Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Microsoft Paid $20 Million to 500 Researchers via Bug
Between July 1, 2025, and June 30, 2026, Microsoft distributed $20 million in rewards to 500 security researchers for identifying vulnerabilities.
Apple caps bug bounty reports amid AI-generated security
Apple has changed its bug bounty program to cap security bug reports, responding to a surge in AI-generated findings that overwhelm its review process
Unit 42 Discovers Three Attack Paths Targeting Google
Researchers at Unit 42 identified three attack methods, dubbed Pass-ta-key, that allow malware on Windows to bypass passkey authentication for Google
N-able RMM Servers Vulnerable to Authentication Bypass Flaw
N-able has identified a new authentication bypass vulnerability, tracked as CVE-2026-18577, that grants attackers administrator-level access to RMM se
Coldcard Air-Gapped Wallet Exploit Raises Offline Security
A vulnerability in Coldcard's air-gapped Bitcoin wallet challenges assumptions about offline security, highlighting risks even in disconnected devices
Pass-ta-key Attacks Exploit Google Password Manager to
Researchers at Unit 42 discovered three techniques that allow malware on compromised Windows devices to bypass passkey protections, impersonate truste
AI-generated fake vulnerabilities pollute the NVD and CVE
Researchers at JFrog discovered 54 fake CVEs, including several for SQLite, that were likely generated by AI and entered the NVD due to a lack of mand
Coldcard Wallet Flaw Exploited in $116M Bitcoin Heist
Hackers exploited a critical vulnerability in Coldcard hardware wallets, stealing about $110 million in Bitcoin from thousands of users, marking a maj
AI Collapses Exploit Window in Crypto Wallet Hack
A new attack exploits a reduced window of opportunity created by AI, compromising Bitcoin hardware wallets and their recovery seeds.
AI Bug Report Slop Floods Apple, Hides $200K macOS Flaw
Generative AI is flooding bug bounty programs with low-quality reports, overwhelming security teams and obscuring real vulnerabilities like a $200K ma
Hackers Exploit Cold Bitcoin Wallet Flaw, Steal Millions
Hackers are exploiting a software flaw in a Canadian cold Bitcoin wallet brand, siphoning tens of millions of dollars in an ongoing attack.
Bitcoin wallet flaw linked to $70M theft from 1K+ wallets
Security researchers warn of a software flaw in a popular bitcoin storage device that may have enabled attackers to drain roughly $70 million from ove