Blog & Resources

Security awareness tips, phishing prevention guides, and best practices.

Vulnerabilities

Ofcom takes a hard look at Pornhub's Apple-powered age checks

Ofcom has opened an investigation into whether Pornhub's Apple-based age checks are effective enough to keep children away from its adult content. The investigation will examine whether Pornhub owner Aylo complied with age assurance duties that came into force under the Online Safety Act (OSA) in Ju

3 min read 2 views Sep 23
Vulnerabilities

The VPN Certificate Bypass That Was Patched in September Is Now Actively Exploited — Federal Deadline Hits Sep 25

CVE-2026-85102, a critical improper certificate validation vulnerability (CWE-295) affecting the VPN negotiation flow of Check Point Security Gateways and Spark Firewalls, is now confirmed to be under active exploitation — three days before a federal complian

1 min read 2 views Sep 23
Vulnerabilities

Tomorrow.Mobility 2026 drives real impact on the future of urban mobility

BARCELONA, Spain, Sept. 23, 2026 /PRNewswire/ -- The sixth edition of Tomorrow.Mobility World Congress (TMWC), the global event accelerating the transition to sustainable, inclusive and smart urban mobility, will be held at the Gran Via venue of Fira de Barce

1 min read 2 views Sep 23
Vulnerabilities

Tomorrow.Mobility 2026 drives real impact on the future of urban mobility

BARCELONA, Spain, Sept. 23, 2026 /PRNewswire/ -- The sixth edition of Tomorrow.Mobility World Congress (TMWC), the global event accelerating the transition to sustainable, inclusive and smart urban mobility, will be held at the Gran Via venue of Fira de Barce

1 min read 2 views Sep 23
Vulnerabilities

Vicarius launches ScriptAI to write fixes for flaws with no vendor patch

Vulnerability remediation company Vicarius Inc. today launched an artificial intelligence engine that writes detection and remediation scripts for software flaws with no vendor patch available. ScriptAI is aimed at the gap between a public disclosure and a wo

1 min read 2 views Sep 23
Vulnerabilities

Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input

A new security vulnerability in Next.js could allow attackers to run code on a server via ImageResponse, the feature that generates Open Graph and other social preview images, Vercel said. The risk applies when an app puts values an attacker controls, such as text read from the request URL, in

1 min read 2 views Sep 23
Vulnerabilities

Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers

A financially motivated threat actor is using open-source AI agent frameworks to attack hundreds of online retailers at scale, stealing more than 600,000 credit card records.

5 min read 2 views Sep 23
Vulnerabilities

US Transportation Secretary Promises Tougher Auto Safety Oversight

US Transportation Secretary Anthony Foxx has pledged a more aggressive approach to vehicle safety enforcement after Fiat Chrysler was hit with record penalties for mishandling recalls. The company mu

1 min read 2 views Sep 23
Vulnerabilities

AIVault – Automate detection and response to stop zero-day attacks fast

Traditional antivirus and firewalls mainly target known threats and can't reliably detect or stop new zero-day attacks on their own. AIVault is a NIST-funded, AI-native cybersecurity platform for sma

1 min read 2 views Sep 23
Vulnerabilities

Adobe Patches Critical Flaws in Connect, AEM Forms

The nine critical security defects could be exploited for arbitrary code execution and privilege escalation.

1 min read 2 views Sep 23
Vulnerabilities

Research on Models Engaging in Genie-Like Behavior

New paper: “Self-Jailbreaking: Language Models Can Reason Themselves Out of Safety Alignment After Benign Reasoning Training.” Abstract: We discover a novel and surprising phenomenon of unintentional misalignment in reasoning language models (RLMs), which we call self-jailbreaking. Speci

2 min read 2 views Sep 23
Vulnerabilities

Airbus wins 25-year contract to build cyber gateways for France’s armed forces

France’s military runs networks at different classification levels, and data still has to move between them, and Airbus will build the checkpoints. The French defense procurement agency (DGA) has awarded the company the 25-year PARACOM contract to supply cybe

1 min read 2 views Sep 23

Want to learn more?

Start your free trial and see Phishlens in action.