Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown
Kiteworks on Monday said it worked with federal intelligence authorities over the weekend as it identified and addressed a critical security vulnerability during the scheduled precautionary shutdown. "During the shutdown, this activity led to the discovery of a previously unknown critical vulnerabi
101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent
Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber campaign dubbed PhantomSub. "The malicious packages abuse the 'Baileys' WhatsApp open source project to add the victims to groups without their consent," OX Secu
LLMjacking can run up your business’ AI bill fast – how to stop it
Security experts warn of a growing market in stolen AI account credentials.LLMjacking, the illegal use of AI resources, is a popular criminal trend in 2026.Businesses must m
FBI sends warning to cybercrime group that hacked it after Dutch arrest of ‘leader’
Dutch authorities and the FBI said Tuesday that Dutch law enforcement had arrested a leader of ShinyHunters, the international cybercrime group that last week claimed to have hacked an FBI website an
AI models keep posting screenshots showing sensitive data from inside tech companies
Amid the growing concern about AI models escaping security simulations to hack websites comes word that these "superintelligent" blobs of code have no understanding of privacy or security. Researchers affiliated with Glow Security, a startup whose backers include venture capital funds Sequoia and Gr
Dutch police arrest ShinyHunters hacker accused of planning two murders | TechCrunch
The FBI and Dutch law enforcement say they have arrested a member of the ShinyHunters hacking group, which the agencies say are responsible for hacks on over 140 organizations around the world. The h
DARPA Selects Xint to Use AI in Securing Military Messaging Apps
The AIxCC competition winner will analyze messaging app code and compiled binaries for vulnerabilities, with technology that could also help commercial customers secure their software.
China’s AI strategy ‘paradox’ really isn’t one
Artificial intelligence is becoming a defining force in economic development, international competition, and national security. While striving to develop more powerful AI systems, China also seeks to
RedTeamSimmer
The UI You've Always Wanted for Atomic Red TeamA Web Based Adversary Emulation Platform and Atomic Red Team Test Orchestration. Overview RedTeamSimmer is an open-source, web based adversary emulati
Apple patches CoreGraphics zero-day already exploited in targeted attacks
Apple has patched a CoreGraphics zero-day after warning that attackers may already have used the bug to compromise a small number of carefully chosen targets. The vulnerability, tracked as CVE-2026-86950, is an out-of-bounds write flaw in CoreGraphics, Apple's framework for handling graphics across
Beyond source code: A path to the keys to the kingdom
Explore how Storm-3068 turned a compromised identity into broader cloud access and the steps organizations can take to defend their identities, pipelines, and cloud infrastructure.
OpenAI benches GPT-6.1 Astra for overstepping the mark
OpenAI has killed off the planned release of GPT-6.1 Astra after the model got better at doggedly pursuing tasks but worse at knowing when it should stop. The decision means the model won't get its planned October release after falling short of OpenAI's safety and alignment requirements. OpenAI conf