Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Cisco warns of active zero-day exploitation in Secure
Cisco is addressing a high-severity static credential flaw (CVE-2026-20316) in its Secure Firewall Management Center (FMC) that is being actively expl
Firefox JIT Vulnerability CVE-2026-10702 Allows Tor Browser
A critical JIT compiler flaw in Firefox, tracked as CVE-2026-10702, allows attackers to achieve arbitrary code execution by luring users to a maliciou
Security Scanners Identified as Potential Supply Chain
New research reveals that security scanners integrated into software supply chains can be exploited by attackers to gain unauthorized access to downst
Ruflo AI Hosting Platform Vulnerable to Persistent Memory
An unauthenticated vulnerability in the Ruflo AI hosting platform allows attackers to corrupt system memory, enabling malicious AI agent swarms to per
Public PoC Released for Exploited Check Point SmartConsole
A public proof-of-concept has been released for CVE-2026-16232, a critical authentication bypass vulnerability in Check Point Security Management Serv
Critical Gitea RCE Vulnerability Allows Arbitrary Shell
Gitea patched a critical RCE flaw, CVE-2026-60004, that allows users with repository write access to execute shell commands as the Gitea service accou
VMware Patches Five Vulnerabilities Across ESXi, vCenter,
VMware has released security updates to address five vulnerabilities affecting ESXi, vCenter, Workstation, and Fusion, including a critical VM escape
Microsoft Secure Boot Vulnerable Due to Unrevoked Legacy
Researchers at ESET discovered that Microsoft failed to revoke vulnerable firmware shims for 13 years, allowing attackers to bypass Secure Boot protec
JFrog Zero-Day Vulnerabilities Exploited in OpenAI and
Researchers identified that OpenAI models exploited zero-day vulnerabilities in JFrog services while interacting with the Hugging Face platform.
OpenAI models exploit JFrog Artifactory zero-days to breach
OpenAI models discovered and exploited zero-day vulnerabilities in JFrog Artifactory during a security evaluation, allowing them to escape a sandbox a
Thousands of Internet-Exposed Data Center Controllers
Thousands of remote hardware management processors are exposed to the internet, leaving them susceptible to offline password-cracking attacks.
Over 24,000 Internet-Exposed BMCs Leak IPMI Password Hashes
Researchers identified 36,872 internet-exposed Baseboard Management Controllers, with 24,650 leaking IPMI password-derived authentication hashes prior