Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
China-Linked Groups Exploit Flaws Within 24 Hours:
CrowdStrike reports China-affiliated threat actors, including Vault Panda, weaponize critical vulnerabilities within a day of disclosure, highlighting
TOK Passport Vulnerability Exposed in 2025 Report
A security report from December 2025 highlights a vulnerability in TOK Passport, with details emerging in 2026.
Attackers exploit N-able N-central auth bypass
Threat actors are exploiting an authentication bypass vulnerability (CVE-2026-18577) in N-able N-central RMM to access managed endpoints, potentially
Thermo Fisher Patches Data Integrity Flaw in Human
Thermo Fisher Scientific addressed a vulnerability, CVE-2026-17583, in Applied Biosystems software that allowed for nearly undetectable tampering with
'We’ve been behind the ball for so long': Experts say DNA
Researchers discover critical vulnerability in forensic software that allows the undetectable modification of DNA samples on crime-scene evidenceThe v
N-able warns of active exploitation of N-central
N-able has released a hotfix for CVE-2026-18577, an authentication bypass vulnerability in its N-central RMM platform that is currently being exploite
Qualys InstaScan Detects Vulnerabilities Within Minutes of
Qualys launches InstaScan, a 'scanless scanning' capability in Enterprise TruRisk Management, using Agent Insta to correlate advisories with asset and
N-able Patches CVE-2026-18577 Vulnerability Exploited in
N-able has released a patch for CVE-2026-18577, a vulnerability in N-central servers that was actively exploited in the wild via a patch bypass.
N-able N-central Servers Compromised After Incomplete
Attackers exploited an authentication bypass in N-able's N-central platform to gain administrative access.
CISA lays out new guidance for using open-source software
The US Cybersecurity and Infrastructure Security Agency (CISA) has published the Open Source Software: Security Principles and Practices guide, which
KindaRails2Shell threatens Ruby on Rails apps
A critical security vulnerability (CVE-2026-66066) in Ruby on Rails (aka Rails), one of the most widely used frameworks for building websites and web
Fastify Rate Limit Flaw Fixed in Version 11.2.0
A high-severity vulnerability in @fastify/rate-limit before 11.2.0 was disclosed. Users should update to the patched version to mitigate risk.