Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1
Overview Thelia versions 2.6.0 and 2.6.1 contain multiple vulnerabilities relating to file management, Smarty templating, module installation, and administrative workflows. Successful exploitation of these issues could enable remote code execution (RCE), serv
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE
A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrar
SonicWall Patches CVSS 10.0 SSRF Flaw as Attacks Begin
Attackers are exploiting SonicWall SMA 1000 vulnerability, tracked as CVE-2026-102255 (CVSS score of 10.0), just days after its public disclosure. Attackers have begun exploiting a critical flaw in SonicWall SMA 1000 appliances, tracked as CVE-2026-102255 (CV
Bricksforge WordPress Plugin Vulnerability Exploited in the Wild
The vulnerability tracked as CVE-2026-85097 can allow threat actors to take control of the targeted WordPress websites.
GreenboneOS: CVE-2026-104286: Fortinet FortiMail Management Interfaces Actively Exploited
CVE-2026-104286 (CVSS 9.8, EPSS ≥ 82nd pctl) is a critical path traversal [CWE-22] and NULL-byte handling flaw [CWE-158] affecting Fortinet FortiMail. Exploitation can be achieved via HTTP/HTTPS request to the FortiMail web interface. The CVE was both publish
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastructure entities in Ukraine. The activity, which brings together commodity offensive tools like Cobal
Continuum AI Introduces OrcaCyber Zero 1.5, a Frontier Cybersecurity Reasoning Model
Updated model reports 95.8% on CVE-Bench and 100% on Cybench, advancing autonomous vulnerability discovery, exploit validation and remediation. SAN FRANCISCO, Oct. 12, 2026 /PRNewswire/ -- Continuum AI announced OrcaCyber Zero 1.5, its latest frontier cyberse
E-commerce AI startup Loops raises $3.5M to create smoother online shopping experiences
Agentic e-commerce startup Loops Smart AI wants to help online retailers create more seamless buying journeys and streamline the shopping experience after raising $3.5 million in seed funding today. Andreessen Horowitz’s a16z speedrun accelerator led the roun
Piracy in the Crosshairs: Brazil to Launch Campaign Against IP Theft
RIO DE JANEIRO, Brazil – Brazil’s Audiovisual Industry and Commerce Federation (FICA) announced at the Rio Film Festival’s RioMarket the launch at the end of October of an anti-piracy awareness campaign in free-to-air and pay television, radio, out-of-home (O
Indonesia targets 18.7 percent factory productivity rise by 2029
Jakarta (ANTARA) - Indonesia's Industry Ministry targets an 18.7 percent increase in manufacturing labor productivity by 2029 as part of a broader push to raise national competitiveness.The roadmap a
GitLab warns of max severity code execution vulnerability
GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances.
Critical SonicWall Vulnerability Exploited Days After Disclosure
CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations.