Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Critical RCE Vulnerability CVE-2026-16723 Found in Alibaba
Attackers are actively exploiting a critical remote code execution flaw in Alibaba's Fastjson library.
PoC Exploit Released for GitLab Remote Code Execution
Researchers released a proof-of-concept exploit for a GitLab vulnerability patched on June 10.
Pope's Click To Pray app leaks data of over 700,000 users
The official Click To Pray app exposes the personal data of 719,517 users due to an unpatched IDOR vulnerability that allows unauthorized access to ac
Researchers find macOS Gatekeeper bypass via app bundle
Researchers Talal Haj Bakry and Tommy Mysk discovered that macOS Gatekeeper fails to revalidate apps downloaded from the web if they are archived and
Russian Laundry Bear group exploits Zimbra XSS flaw to
The Russian-linked group Laundry Bear has been exploiting CVE-2025-66376 in Zimbra Collaboration Suite since July 2025, allowing attackers to steal da
2.2 Million Vehicles Vulnerable to Bluetooth Hijacking via
Researchers at UCSD discovered a flaw in KARR and SWDS security devices that allows attackers within five yards to unlock doors or disable ignitions.
Oracle releases 1,449 security patches in record-breaking
Oracle issued 1,449 security patches, a record volume attributed to AI-driven vulnerability detection.
CISA Expands Warning on Iranian APT Targeting Industrial
CISA updated an advisory warning that Iranian-affiliated hackers are targeting internet-facing PLCs from Schneider Electric and Siemens, in addition t
Researchers Identify Exploitable Flaws in Microsoft Passkey
Security researchers discovered flaws in Microsoft's passkey handling that could allow attackers to impersonate privileged users.
Microsoft Releases Record 570 Security Patches Amid
Microsoft addressed 570 security flaws in its July Patch Tuesday, including three zero-days.
Microsoft Releases Record-Breaking Patch Tuesday Updates
Microsoft issued patches for nearly 200 security flaws, including multiple zero-days.
CISA Urges Immediate Patching of Exploited LiteSpeed cPanel
CISA has issued an urgent warning to patch a zero-day vulnerability in the LiteSpeed Cache plugin for WordPress, which attackers are actively exploiti