Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
FTC reportedly investigating OpenAI, Anthropic over potential consumer risks
The U.S. Federal Trade Commission is reportedly investigating OpenAI Group PBC, Anthropic PBC and other artificial intelligence providers. The New York Times today cited a source as saying that the probe covers multiple areas. According to the report, the FT
honeypot-stuff
Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated operating system comm
Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager
Attackers are exploiting a new critical zero-day flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30. The flaw, CVE-2026-76504, could allow a remote attacker with no login access to use the Manage
pcybox-attackgraph
Build. Attack. Defend. Understand. An open source lab that runs entirely in your browser: build a simulated infrastructure, watch an attack move through it, and check whether your defense really wor
16-year-old researcher found a Microsoft bug, got admin access to databases with 17.3 trillion rows
A 16-year-old security researcher named Faav found an authentication flaw in Microsoft’s Titan analytics service that allowed him to gain administrator access, submit unauthorized SQL queries with no valid credentials, and potentially reach analytics databases containing an estimated 17.3 trillion s
CEO George Kurian outlines NetApp’s data strategy for production AI
Intelligent data infrastructure is becoming critical as enterprises move artificial intelligence from curated pilots into production. NetApp Inc. is positioning its Novus architecture for that transition. Ninety-three percent of organizations pursuing product
Apple Discovers Zero-Click iOS Flaw Tied to Targeted Spyware Attacks
Apple has rushed out emergency updates for a zero-click flaw that can run code on devices with no tap from the user. The company says an out-of-bounds write in CoreGraphics, tracked as CVE-2026-86950, may have been exploited in extremely sophisticated attacks
DIVD says Zammad zero-days enabled AI-driven network breach
The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system.
Walapay raises $4.6M to bring near instant global payments to local businesses
Walapay Inc., a global payments infrastructure firm using stablecoins for account issuance and payouts, today announced it has raised $4.6 million in a seed round led by Generative Ventures to bring global payments to local businesses. Commerce Ventures, Rall
What’s up with… AT&T, Deutsche Telekom, EU telcos
In today’s industry news roundup: AT&T strikes a multiyear deal with more than $3bn to source optical fibre from fellow US firm Corning; Deutsche Telekom’s T-Systems to add Cloudflare cloud secur
Google: AI Is Changing the Pace and Profile of Vulnerability Discovery
Google’s analysis found that AI-discovered vulnerabilities are more likely to enable remote code execution.