Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Nvidia Introduces “Killswitch” to Stop AI Agents From Going Rogue
Nvidia has launched its Open Agent Safety Platform, combining open-source software and hardware watchdogs to keep AI agents under control.
Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent
Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent. "The implant installs the framework unchanged, then overwrites its SOUL.md per
Hackers are exploiting two critical Citrix NetScaler zero-days
Attackers are exploiting two critical flaws in Citrix NetScaler ADC and NetScaler Gateway. Companies use the devices to give staff remote access to internal networks. Citrix confirmed the attacks in a security bulletin on Sunday and released fixes. Both flaws
JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack
The "agentic threat actor" may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.
Citrix says two worrying NetScaler RCE zero-days exploited in attacks
Citrix patched two critical zero‑days (CVE‑2026‑88771, CVE‑2026‑88772) in NetScaler ADC/Gateway, both enabling remote code executionExploits already observed; CISA added flaws to KEV
Federal judge strikes down Utah's controversial VPN age verification rules
Utah tried to force adult websites to track users through their VPNs, but a federal judge has blocked the law, ruling it likely violates the US Constitution. Here’s what this means for your online privacy.
Is Outlook Down? Users Report Possible Microsoft Outlook Problems, Weeks After Multi-Day Exchange Outage
REDMOND, Wash. — Users reported possible problems with Microsoft Outlook on Monday, according to the outage-tracking service Downdetector, though the sources reviewed for this article did not show a
JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources
The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the activity under the name Storm-3168, has called it an evolution of the threat actor's tradecraft. The a
FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day
The FBI’s online portals for job applicants (at apply.fbijobs.gov) and special agent applicants (at fbijobs.gov/special-agents) are still unavailable, following what appears to be successful compromises by the ShinyHunters cyber extortion group. Last week, th
OpenAI Learns Its Tech Probed Another Cybersecurity Target: The US Government
OpenAI’s autonomous agents probed U.S. government websites this summer without the company noticing. The agents interacted with sites operated by the Education Department, the Commerce Department and the Securities and Exchange Commission (SEC), according to
AppDirect acquires interactive AI avatar firm Soul Machines for advisers and businesses
AppDirect Inc., the cloud-based business commerce platform and marketplace provider, today announced it acquired Soul Machines Ltd., an artificial intelligence human-like avatar experience provider, to expand the company’s ability to deploy interactive experi
Civil Infrastructure Platform Achieves Significant Cybersecurity Milestone with IEC 62443 Compliance
CIP becomes one of the first open source projects to achieve this level of compliance, providing a stronger security foundation for industrial and critical infrastructure systems The Civil Infrastructure Platform (CIP) has achieved compliance with IEC 62443-4