Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Critical Unpatched Fastjson Vulnerability Under Active
A critical remote code execution vulnerability in the Fastjson library is being actively exploited.
Critical OS Command Injection Vulnerability Found in Arista
A critical OS command injection vulnerability in on-premises Arista VeloCloud Orchestrator deployments is being exploited as a zero-day.
PleaseFix Vulnerabilities Expose Agentic Browsers to Social
A new class of flaws dubbed PleaseFix allows attackers to manipulate agentic browsers via social engineering, exploiting weaknesses in cross-origin re
Public Exploit Released for Pre-Auth Code Execution Flaw in
A public exploit has been released for a critical vulnerability in vBulletin versions 6.2.1 and 6.1.6 and earlier.
Hackers actively exploit zero-day RCE vulnerability in
Attackers are exploiting CVE-2026-16723, a critical remote code execution flaw in FastJson versions 1.2.68 through 1.2.83, primarily targeting U.S.
Arista Patches Actively Exploited Critical VeloCloud
Arista released patches for CVE-2026-16812, a critical 10.0 severity command injection flaw in VeloCloud Orchestrator that is being actively exploited
n8n Patches Sandbox Escape Vulnerability Allowing OS
n8n released patches for a high-severity sandbox escape flaw that allowed authenticated workflow editors to execute arbitrary OS commands on the host
Certighost PoC exploit allows attackers to hijack Windows
A proof-of-concept exploit for CVE-2026-54121, dubbed Certighost, allows low-privileged users to impersonate domain controllers via Active Directory C
Microsoft Defender for Endpoint update disables security
A faulty Microsoft Defender for Endpoint update for Linux can disable security services after a reboot.
GitHub Adds 3-Day Dependabot Cooldown to Mitigate Poisoned
GitHub introduced a default three-day waiting period for Dependabot pull requests to help developers avoid malicious or "poisoned" software packages r
Magnet Forensics Sues Paradigm Shift Over Apple Boot ROM
Magnet Forensics has filed a lawsuit against cybersecurity research firm Paradigm Shift following the publication of details regarding a boot ROM vuln
Researcher unveils Pass-the-Passkey attack family at Black
Security researcher Michael Grafnetter presented a new family of attacks called Pass-the-Passkey at Black Hat, targeting the authentication standard i