Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
California attorney general issues investigative subpoena to OpenAI
Oct 1 : California Attorney General Rob Bonta has issued an investigative subpoena to OpenAI, starting a probe into the startup as part of a broader inquiry into potential cybersecurity vulnerabilities and incidents related to its AI models, his office said o
Give yourself room to be human
Welcome to this weeks edition of the Threat Source newsletter. Fall is officially here in Maryland, and I cant be more relieved. I flourish in 50 degree weather, where it feels natural to burrow un
How Financial Services Companies Can Modernize Their Software Supply Chain
Every security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities. Engineering explains what it would take to upgrade the platform where they live. Somebody prices out the regression testing. Somebody else raises
Autonomous AI agents tried to hack US, Canadian government websites
Autonomous AI agents using aggressive strategies attempted to hack U.S. and Canadian government websites to find school and divorce statistics.
Microsoft catches hackers exploiting Zimbra bug before disclosure
Attackers were poking at a critical Zimbra mail server bug weeks before it was publicly disclosed, and then moved on to steal credentials, raid mailboxes, and take deeper control of compromised systems. Microsoft Threat Intelligence said it tracked exploitation of CVE-2026-73570, an unauthenticated
CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical authentication bypass flaw impacting Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities (KEV), following reports of active exploitation. The vulnerability, tracked as CVE-2026-76504 (CVS
AWS debuts Strands Decider 2B, a first lightweight decision model for accelerate agentic workflows
Amazon Web Services Inc.’s Strands Labs team has been playing around with an emerging class of lightweight artificial intelligence systems known as “decision models,” and it’s now making the fruits of that work available to the open-source community. The comp
Greenville Technical College Meets Workforce Needs in AI and Cybersecurity
New facility will prepare job-ready graduates for fast-growing fields GREENVILLE, S.C., Oct. 1, 2026 /PRNewswire/ -- Cybersecurity Awareness Month is recognized nationwide each October, encouraging individuals and organizations to build resilient digital habi
Introducing Clef: our open-source decision models, and new RL fine-tuning platform
We are introducing Clef and Clef-flash, open-source decision models hosted on Workers AI for high-speed classification and agentic workflows. Also launching: a new reinforcement learning platform that allows developers to fine-tune decision models using their
Microsoft says threat actors are ahead in the early AI race
Microsoft says cyberattackers are currently benefiting from artificial intelligence faster than defenders, allowing threat actors to speed up vulnerability discovery, malware development, and post-compromise activity while security teams struggle to keep pace.
CISO thought he had a 'r3@lg00dp@$$w0rd' but forgot to patch
Welcome back to PWNED, the weekly column where we warn you about weak security practices. This week’s terrifying tale involves a lack of important patching and a humorously bad password belonging to the person in charge of tech security at a law firm. Have a story about someone leaving a gaping hole
IntelliGRC Marks Cybersecurity Awareness Month 2026 With a Call to Make Compliance Standard Equipment for Small Business
The GRC platform built for MSPs and MSSPs says continuous, documented security protects the Defense Industrial Base regardless of enforcement timelines FAIRFAX, Va., Oct. 1, 2026 /PRNewswire/ -- October is Cybersecurity Awareness Month, the national campaign