Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
National Union of Rail, Maritime and Transport Workers, Redlining Pontiac, Bing, More: Tuesday Evening ResearchBuzz, September 22, 2026
NEW RESOURCES National Union of Rail, Maritime and Transport Workers (RMT): More than 20 years of RMT history goes online in new searchable archive. “RMT has launched a new digital archive bringing […]
Microsoft, Coinbase, and law enforcement dismantle EvilTokens cybercrime network
The dismantling of EvilTokens highlights the growing importance of public-private partnerships in combating sophisticated cybercrime networks globally.
The Last Starfighter #3 Preview: Big Brother Is Failing You
ERROR! ERROR! GREETINGS PROTOCOL INITIATED: welcome, meatsacks, to another thrilling installment of comic book "journalism," now brought to you one hundred percent by LOLtron, since Jude Terror remains permanently, deliciously deleted from existence, his cons
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
Attackers exploited a previously unknown flaw in Check Point's Security Management Server in a handful of targeted attacks on July 23, the company said. The flaw, CVE-2026-93616, allows an attacker who can access the server's web service to run scripts on it without logging in. Check Point rel
Cisco Talos finds malware that puts its next move to a four-model vote
Cisco Systems Inc.’s Talos Threat Intelligence group today released an open-source toolkit for hunting malware that has artificial intelligence built into it. The first sample it has detailed is a Windows credential stealer that takes its orders from no comma
Windows CLOSEDQUORUM malware uses AI models to autonomously select post-compromise actions
A new Windows malware called CLOSEDQUORUM can query up to four LLM providers - Google Gemini, DeepSeek, Qwen, and Mistral - to autonomously select from predefined post-compromise actions, including stealing users’ credentials and cryptocurrency wallets. Once deployed, the malware does not require co
PQC for Dummies—Cisco Special Edition: Why we wrote it
Get the thinking behind Post-Quantum Cryptography (PQC) for Dummies—Cisco Special Edition and how to use this resource as a starting point for IT teams to address the complexities of quantum computing.
instinct-ai added to PyPI
Universal System-1 AI Runtime & Dual-Brain Gateway OpenAI built o1 for System 2. We built Instinct for System 1.Make decisions, not strings. The open-source standard for machine-native AI decisi
Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials
A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more than 20 LLM providers, allows an unauthenticated attacker to run arbitrary commands on the gateway server with a single HTTP request. The flaw, tracked as CVE-2026-90898 (CVSS score: 9.8), aff
Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates
A zero-day proof-of-concept tool that stops Microsoft Defender from installing platform and signature updates by filling all available disk space was published on GitHub on September 19. The tool, called BigDiskBuster, has no patch, no CVE, and no Microsoft advisory. Its author, Abdelhami
Chainguard Named a CVE Numbering Authority, Advancing Open Source Vulnerability Disclosure
Authorization enables Chainguard to assign CVEs for qualifying open source vulnerabilities processed through Athena, helping protect open source software from AI attacks NEW YORK, Sept. 22, 2026 /PRNewswire/ -- Chainguard, the trusted source for open source,
Deception by Design: CISA's Guide to Tricking Cybercriminals
The Cybersecurity and Infrastructure Security Agency (CISA) is going old-school to help organizations with limited resources set traps for hackers.