Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Researchers find way to listen in on headphones from afar
Researchers based in China have devised a way to eavesdrop on signals handled by analog components in devices such as headphones, landline handsets, and smart devices by injecting electromagnetic (EM) signals. The technique, referred to as InjectEave, is not simply listening in on a low-frequency an
CISA Ditches Weekly Vulnerability Roundups for Risk-Based Focus
The move is consistent with the agency's advice on the need for organizations to prioritize the vulnerabilities that actually matter.
Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files
Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape the project directory shared into it and read or change files anywhere else on the host, Docker warns in a security announcement on September 15. The escape runs with the rights of the host account that
AI agents erase the paper trail, reshaping audit assurance
Enterprise audit teams are finding that the evidence trail they depend on does not survive contact with AI agents. Financial and operational data still sits across NetSuite, human resources platforms and data lakes, but the judgment calls once recorded in ema
China's Salt Typhoon backdoors Latin American orgs with new snooping malware
China’s Salt Typhoon gang has developed a new backdoor and dropped it in networks belonging to high-profile organizations in several countries across Central and South America since at least August 2025, according to researchers. The PRC-backed espionage crew shifted its focus to Latin America a mon
Pentagon reports tenfold rise in cybersecurity vulnerabilities due to AI
AI's role in escalating cybersecurity threats highlights the urgent need for robust digital infrastructure and proactive defense strategies.
Should you care about an “AI slowdown?”
Welcome to this weeks edition of the Threat Source newsletter. Theres been a lot of talk recently about slowing down the pace of AI development . And yes, there are legitimate moral, ethical, geop
Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone
Every release of the Unbound DNS resolver before 1.26.1 has a critical heap overflow in its DNSSEC validator, maintainer NLnet Labs said in an advisory on Wednesday. An attacker who controls a malicious zone and queries a vulnerable resolver can trigger it, enabling remote code execution.
The “Citizen-Soldier” is coming: Conscripts will defend their home area – What is changing in military service with “Agenda 2030”
The Chief of the HNDGS, General Dimitrios Houpis, described the relationship between the Armed Forces and society – The role of the professional military, Artificial Intelligence, drones and women
GDT To Be Acquired by Softcat, Expanding Capabilities & International Reach
Joins Forces with Publicly Traded UK-Based Company to Broaden IT Solutions and Services DALLAS, Sept. 17, 2026 /PRNewswire/ -- GDT, a leading North American technology solutions provider specializing in data center and networking services, today announced a d
CISO's Expert Guide to Agentic Pentesting for Websites
Attackers now weaponize new vulnerabilities in about five days (Mandiant, part of Google Cloud). The median organization takes 43 days to patch one (Verizon DBIR 2026). A new free guide explains how autonomous AI agents are closing that gap, and what security leaders must demand before pointing one
Open-source AI is helping hackers hide malicious code directly on blockchains
The rise of blockchain-based malware, fueled by open-source AI, threatens the security of the crypto ecosystem, challenging its core principles.