Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
AI governance moves from observability to provable control
As artificial intelligence agents move from experimental tools into production systems, enterprise governance is being forced to answer a harder question. It is no longer enough to know what an agent did. Organizations increasingly need to prove what the agen
EU Cyber Resilience Act Brings 24-Hour Vulnerability Reporting Into Force
TL;DR Parts of the EU Cyber Resilience Acts vulnerability-reporting regime are now applicable.Manufacturers must issue early warnings for actively exploited vulnerabilities within 2
What to expect during Oracle’s ‘AI Cyberattacks Are Escalating: How to Secure Your Data Now’ event: Join theCUBE on Sept. 22
At a time when AI is introducing new risks to global systems, Oracle Corp. is shifting enterprise security toward the data layer. This approach, based on a three-pronged strategy to secure at source, secure at speed and secure through resilience, relies on ro
China’s hackers are hiding in plain sight
Google recently reported that a China-linked hacking group ran artificial intelligence tools inside compromised networks. The technique let the hackers use victims’ computing resources and credentials while reducing the traffic that might expose them. The gro
Salesforce after Dreamforce: How the CRM giant can grow beyond its own interface
Salesforce Inc.’s next growth opportunity just may come from customers spending less time in its interface, and having artificial intelligence agents do more of the work. Coming out of the customer relationship management company’s Dreamforce 2026 this week i
Reversecore_MCP v3.0.4
A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more.
SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE
SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability. The vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring s
TigerByte Cyber Emerges From Stealth With $3 Million in Funding
The company has secured over $7 million in contracts with US government agencies, including the US Space Force, the US Navy, and DARPA.
red-teaming-auto-mode
Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution. "Orkes Conductor 3.21.21 b
Apple @ Work: Enterprise oassword management is still hard, and Dashlane’s new Vault Enforcement aims to fix it
Apple @ Work is exclusively brought to you by Mosyle, the only Apple Unified Platform. Mosyle is the only solution that integrates in a single professional grade platform all the solutions necessary to seamlessly and automatically deploy, manage, and protect
IT Coalition marks three years: €1.85 billion in support for the Defence Forces of Ukraine
The IT Coalition is marking its third anniversary. Over this period, Ukraine and 17 partner countries have coordinated efforts to strengthen communications, cybersecurity, IT infrastructure, and the digital systems used by the Defence Forces of Ukraine.