Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
CISA mandates federal agencies patch actively exploited
CISA has ordered U.S. federal agencies to patch a critical privilege escalation vulnerability (CVE-2026-48172) in the LiteSpeed cPanel user-end plugin
Microsoft Releases Out-of-Band Patch for Critical
Microsoft issued an out-of-band security update to address CVE-2023-29357, a critical remote code execution flaw in SharePoint Server that allows unau
Microsoft Patches Critical SharePoint RCE Vulnerability
Microsoft has released patches for CVE-2026-45659, a critical RCE vulnerability in SharePoint.
KnowledgeDeliver LMS Zero-Day Exploited to Deploy Godzilla
Attackers exploited a critical deserialization zero-day (CVE-2026-5426) in KnowledgeDeliver LMS, caused by hardcoded machine keys, to achieve remote c
India Mandates 12-Hour Patching for Internet-Facing Flaws
CERT-In now recommends organizations patch critical internet-facing vulnerabilities within 12 hours due to the rise of AI-assisted attacks.
KnowledgeDeliver LMS zero-day exploited for Godzilla and
A critical zero-day vulnerability (CVE-2026-5426) in Digital Knowledge's KnowledgeDeliver LMS was exploited to deploy the Godzilla web shell and Cobal
Microsoft patches high-severity RCE vulnerability in
Microsoft released a patch for CVE-2026-45659, a high-severity remote code execution vulnerability affecting multiple versions of SharePoint Server.
Ethical hacker exposes critical vulnerability in CBSE
Ethical hacker Nisarga Adhikary discovered a significant security flaw in the Central Board of Secondary Education (CBSE) Online Submission Module (OS
Critical Vulnerabilities Discovered in CBSE On-Screen
A security researcher identified critical vulnerabilities within the Central Board of Secondary Education (CBSE) On-Screen Marking portal, allowing fo
CISA Orders Federal Agencies to Patch Actively Exploited
CISA has mandated that federal agencies patch CVE-2026-9082, a critical SQL injection vulnerability in Drupal, by May 27 following reports of active e
Microsoft: KB5087537 update breaks domain controller
Microsoft confirmed that the May 2026 security update KB5087537 causes domain controller lookup failures on Windows Server 2016 systems with 15-charac
Linux Kernel, Microsoft Defender Hit by Exploited Zero-Days
Critical zero-day vulnerabilities in Linux kernel and Microsoft Defender were actively exploited, allowing privilege escalation and remote code execut