Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
19-year-old cybersecurity researcher Nisarga Adhikary, who flagged flaws in CBSE portal, named in US DOJ Hall of Fame
Nisarga Adhikary, a 19-year-old cybersecurity researcher, receives recognition from the US Department of Justice for discovering vulnerabilities in the CBSE On-Screen Marking portal, showcasing his commitment to responsible disclosure and cybersecurity innova
Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure
Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of public disclosure. The vulnerability in question is CVE-2026-87902 (CVSS score: 9.2), which could allow an unauthenticated attacker to obtain remote code execution (RCE). "An unauthenticated attacker
SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted
The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.
Government contractor exposed path to immigration records
Welcome back to PWNED, the column where we look at all the ways your security can become self-owned. Today’s scary story involves government contractors who just had to make their lives easier at the expense of locking down sensitive information. Have a story about someone leaving a gaping hole in t
FedRAMP VDR & VER: Daily Scans Are Only the Beginning
FedRAMP's new VDR and VER requirements make vulnerability management more continuous, with faster scanning, tighter remediation deadlines, and stronger evidence requirements. Anecdotes explains why the December 7 deadline is just the beginning of a broader shift toward continuous, automated complian
Hackers now exploit critical Roundcube flaw in code injection attacks
A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited in attacks, according to the Canadian Centre for Cyber Security.
FBI Crypto Crime Forum Targets Scams, Hacks and North Korean Threats
The FBI has brought together investigators, partner international law enforcement, and crypto experts for its Virtual Asset Technical Exchange in San Antonio, amid multibillion-dollar losses
TeamPCP Supply Chain Attack Leads to CrowdSec Source Code Being Stolen
TL;DR — Key Takeaways A TeamPCP npm supply-chain attack on TanStack led to the theft of source code from about 170 private CrowdSec GitHub repositories after attackers hijacked a former empl
Critical WordPress Vulnerability Exploited Immediately After Disclosure
Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code.
US Military Satellites Test New Cyber Defenses in Orbit
Some U.S. military satellites have been operating so long that the Guardians controlling them weren't alive when the spacecraft first reached orbit. There are operators at Schriever Space Force Base
Brooklyn man sentenced to 12 years for stealing $16M from Coinbase users
The case highlights the persistent vulnerabilities in crypto security and the challenges of recovering stolen assets despite legal victories.
OpenAI hacked Australian Medicare govt site, probed data providers
OpenAI agents targeted public data providers in multiple countries, probing some for vulnerabilities and exploiting a security weakness in an Australian government portal while performing information-retrieval tasks as part of a research project.