Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
CISO's Expert Guide to Agentic Pentesting for Websites
Attackers now weaponize new vulnerabilities in about five days (Mandiant, part of Google Cloud). The median organization takes 43 days to patch one (Verizon DBIR 2026). A new free guide explains how autonomous AI agents are closing that gap, and what security leaders must demand before pointing one
Open-source AI is helping hackers hide malicious code directly on blockchains
The rise of blockchain-based malware, fueled by open-source AI, threatens the security of the crypto ecosystem, challenging its core principles.
Starbucks (SBUX) Wins Big in Court, but One Finding Still Sticks
A federal appeals court declined to enforce most of a National Labor Relations Board ruling that Starbucks Corporation (NASDAQ:SBUX) illegally threatened employees with reprisals for trying to unioni
Cisco drops another exploited zero-day, this time a perfect 10
Cisco admins who have spent their week patching email gateways now face a perfect-10 Identity Services Engine flaw under active attack. Cisco disclosed CVE-2026-76460 on Wednesday, describing it as an authentication bypass affecting Identity Services Engine (ISE) and ISE Passive Identity Connector (
CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot
The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk.
Cisco hit by max severity zero-day exploit targeting Identity Services Engine, so it's time to patch up
Cisco fixed critical ISE flaw (CVE‑2026‑76460) allowing unauthenticated API authentication bypassActively exploited; no workarounds exist—patching is the only mitigation, per Cisco P
Agent-Reach
Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.
BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS
The Internet Systems Consortium (ISC) has released BIND 9.20.29 and 9.21.26 to fix fourteen security flaws it disclosed on 16 September in BIND 9, its open-source DNS server software. One of them affects any BIND server that answers DNS-over-HTTPS (DoH). A sender with no credent
Test environment let anyone access live customer data
PWNED Welcome back to PWNED, the weekly column where we learn important life lessons about how we let cybercrims access our data through carelessness. Hopefully, others’ mistakes provide an example of what not to do. Today’s tales of woe comes courtesy of Richard Schut, Managing Director & AI Softwa
Exclusive: PeakMetrics tracks brand reputations across five top AI platforms
Narrative intelligence company PeakMetrics Inc. today launched a monitoring service that measures how brands are portrayed across five prominent generative artificial intelligence platforms and identifies the online sources that shape those portrayals. The ne
CISA wants critical infrastructure orgs and smaller security teams to start using cyber decoys
Cyber deception has long been the domain of well-resourced security teams, but CISA’s latest guidance, titled “Using Cyber Decoys to Strengthen Detection and Response”, is an attempt to try and change that. Why decoys, and why now The core problem CISA is att
ISC Patches 14 Vulnerabilities in BIND 9 Security Update
Attackers could exploit the flaws to increase resource usage, trigger an unexpected program exit, or terminate the named process.