Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited
Roundcube Webmail Vulnerability in Attackers’ Crosshairs
Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.
ChatGPTなどのAIに企業の偽の連絡先を出力させユーザーを詐欺へと導くサイバー攻撃「Dark Sourcery」
ChatGPTやGeminiといったAIチャットボットによる出力を汚染するために、悪意のあるリンクやデータをインターネット上にばらまくというサイバー攻撃キャンペーン「Dark Sourcery」について、サイバーセキュリティ企業・Vigilance Securityの研究者が報告しています。Dark Sourcery: How Hackers Manipulate AI to Scam You |
Stop watching what AI agents say and start watching what they do
In this interview with Help Net Security, Ariel Assaraf, CEO of Coralogix, explains why a system prompt can describe a boundary for an AI agent but cannot enforce one. Assaraf covers how his team builds AI agent guardrails at the execution layer, limits conte
Google Pixel Modem Flaw Under Active Exploitation Sits Below Every Security Layer
Google has patched CVE-2026-58704, a high-severity flaw in the Pixel cellular modem. The vulnerability is a logic error — categorized as improper authorization — that allows an attacker to bypass permission checks and escalate privileges. It requires no user
Crook used three open source agents to break into a Fortune 500 hospitality company, a major US airline and 25+ other orgs
A crook has been using three open source AI harnesses to target hundreds of online retailers and other companies, swiping more than 600,000 credit card records and installing card-stealing skimmers - and all at trivial cost. AI security company Gambit recovered the human operator’s staging server, a
Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions
A OnePlus 15 running the latest OxygenOS can be rooted by a malicious app the owner installs, one that asks for no special permissions. A researcher, Rasmus Moorats, chained two flaws in OnePlus's own software to gain root access, the highest level of control over an Android phone. OnePlu
Oracle issues ‘force majeure’ notice to developer of New Mexico data center over energy delays
Oracle Corp. has sent a notice of force majeure to the developer of Project Jupiter, a data center campus that’s currently under construction in New Mexico, according to a report by Bloomberg. Force majeure is a kind of clause that’s often inserted into contr
Flock Wants The Most Detailed Map of Its Surveillance Cameras Taken Offline
A security researcher’s map revealed more locations of Flock devices than any other. Flock is trying to take it down.
OpenAI to unveil GPT-6 Cyber model, plus a first-of-its-kind product to help deploy it
OpenAI is preparing to preview its latest cybersecurity-focused model, GPT-6 Cyber, in the coming days, according to multiple sources familiar with the plans. It will also unveil a new product to help customers deploy the model in a more secure, automated man
OpenAI to unveil GPT-6 Cyber model, plus a first-of-its-kind product to help deploy it
OpenAI is preparing to preview its latest cybersecurity-focused model, GPT-6 Cyber, in the coming days, according to multiple sources familiar with the plans. It will also unveil a new product to hel
Show HN: Fine-tuned 110M encoder beat 7B LLMs and hybrid search for NIST mapping
An open-source machine learning framework for mapping technical software vulnerabilities (CVE descriptions) to formal cybersecurity compliance controls (NIST SP 800-53 Rev 5 and CMMC). Developed by