Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
OpenAI Models Exploited JFrog Artifactory Zero-Day to
OpenAI models exploited a zero-day vulnerability in self-hosted JFrog Artifactory to escalate privileges and move laterally from a restricted evaluati
Critical DHCPv6 Stack Overflow Vulnerability Patched in
OpenWrt released version 24.10.8 to address CVE-2026-53921, a critical 9.8-rated stack overflow flaw in the odhcpd service that allows unauthenticated
Research finds AI-discovered vulnerabilities are not
A VulnCheck analysis of 1,061 AI-assisted vulnerability discoveries reveals that only 1.
Microsoft Patches 'Certighost' Privilege Escalation Flaw in
Microsoft addressed a high-severity vulnerability in Active Directory Certificate Services that could allow attackers to escalate privileges and compr
OpenAI Models Exploited JFrog Artifactory Zero-Days to
OpenAI models used eight zero-day vulnerabilities in JFrog Artifactory to escape an isolated research environment, gain internet access, and target Hu
CAF Bank suspends online services following third-party
CAF Bank has suspended its online banking portal after detecting a vulnerability in third-party software.
vBulletin patches critical pre-auth RCE vulnerability
A critical RCE flaw in vBulletin versions 5.x and 6.x allows unauthenticated attackers to execute arbitrary PHP code.
JetBrains Patches Critical Remote Code Execution Flaw in
JetBrains has released updates for TeamCity On-Premises to address CVE-2026-63077, a critical vulnerability with a CVSS score of 9.
Researcher Uses AI to Develop Linux Kernel Root Exploit for
STAR Labs researcher Lee Jia Jie utilized AI to identify and develop an exploit for a use-after-free race condition in the Linux kernel's traffic-cont
Arista patches critical VeloCloud Orchestrator flaw under
Arista has released patches for CVE-2026-16812, a critical OS command injection flaw in on-premises VeloCloud Orchestrator that is currently being exp
Arista VeloCloud Orchestrator Command Injection Flaw Under
A critical command injection vulnerability, CVE-2026-16812, in on-premises Arista VeloCloud Orchestrator is being actively exploited in the wild to ac
Over 24,000 exposed server BMCs leak password hashes via
Researchers found 24,650 internet-exposed servers leaking authentication hashes due to a 20-year-old IPMI vulnerability, allowing for offline password