Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories
Mandiant says an attacker hijacked an active AI coding-assistant session at an unnamed software-as-a-service provider and later spread Shai-Hulud across about 100 internal code repositories. Before the repository spread, the assistant recommended software that the attacker had poisoned, a
AI agents are getting better at cybersecurity. That cuts both ways.
Cybersecurity researchers have spent decades building sandboxes and isolated test environments where they can safely unleash malware, probe vulnerabilities and generally do things that would be extre
Data Broker Radaris Loses Domains in Privacy Fight
The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information from its vast empire of people-search services online. That reputation caught up with the company recently in a lawsuit alleging Radaris violated a New Jersey privacy law that provides
House Energy and Commerce Committee chair doubts AI risk bill will advance this year
The delay in AI risk legislation may lead to fragmented state-level regulations, impacting national consistency and global competitiveness.
HBO Max Reddit account used to spread 108 malware and crypto stealing ads in 48 hours
The hijacking highlights vulnerabilities in verified accounts, posing ongoing risks to digital trust and crypto security across platforms.
House Subcommittee on Health Examines Healthcare Cybersecurity Proposals
On September 15, 2026, the United States House Energy and Commerce Committee Subcommittee on Health held a legislative hearing on proposals to improve On September 15, 2026, the United States House Energy and Commerce Committee Subcommittee on Health held a l
Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation
Google has disclosed that a high-severity security flaw in its Pixel Cellular Modem has come under exploitation in the wild. The vulnerability, tracked as CVE-2026-58704 (CVSS score: 8.0), is a privilege escalation flaw. "In Cellular Modem, there is a possible permission bypass due to a logic erro
Threat Intelligence Alone Won't Close the Exploitation Gap
A leaked credential shows up in a criminal marketplace, or a vulnerability gets a disclosure advisory, and either one can be weaponized against a real target before most security teams have triaged the alert. Attackers are combining that kind of intelligence with AI-assisted exploitation to accelera
First Agentic AI Data Breach Reported to Spanish Regulator
Spanish regulators say an AI agent chained together a successful login, vulnerability discovery, and access to personal data in a potential milestone for autonomous cyberattacks.
Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks
Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild. The vulnerability, tracked as CVE-2026-87886 (CVSS score: 7.8), is described as a case of local privilege escalation due to insecure file perm
Hugging Face CEO says existing cyber laws likely sufficient for AI regulation
The focus on enforcement and transparency over new laws could reshape AI industry norms, emphasizing accountability and proactive security measures.
NASA Visits Schools Strengthening Florida’s Skilled Workforce
NASA recently awarded $10.5 million to seven organizations nationwide through its new State Hubs initiative. Space Florida was selected for Project ORBIT, which aims to expand opportunities for middle and high school students, boost enrollment in key career a