Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Exaforce adds a kill switch for AI agents that go rogue
Agentic security operations startup Exaforce Inc. today launched Exaforce AI Security, capabilities that let security teams see the artificial intelligence agents running across their environments and shut down the ones that turn hostile. Exaforce built the r
LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server
A critical vulnerability in LiteSpeed Web Server Enterprise could let a low-privilege website user gain root access on a shared-hosting server, cPanel warned in an advisory published on September 14. On such servers, many customers' sites run on a single machine, and an attacker with one of th
Salesforce announces AIforce, unlocking the power of its platform using composable agents
Salesforce Inc. unveiled AIforce today during its Dreamforce user conference, a new artificial intelligence interface layer that brings the power of the company’s platform to where people use AI agents to work by providing business logic, semantics, security
Salesforce deepens its integrations with AWS and Google Cloud to support AI agents
Salesforce Inc. is stretching its data and artificial intelligence tentacles further into the public cloud, announcing expanded strategic integrations with both Amazon Web Services Inc. and Google Cloud. The partnerships, announced at Dreamforce 2026 today in
Salesforce debuts Koa, a specialized model built to reason about CRM data
Salesforce Inc. said today at its annual user conference Dreamforce that it has partnered with Nvidia Corp. to train and release Koa, a specialized artificial intelligence model that’s custom built for reasoning about customer relationship management data. Ba
StackHawk’s Wingman fixes security flaws while the AI agent is still coding
Application security company StackHawk Inc. today launched Wingman, a tool that fixes security vulnerabilities inside the artificial intelligence coding session that produced the flawed code. The software installs into agentic coding workflows, among them Cla
Siemens Reyrolle 7SR5
View CSAF Summary Siemens Reyrolle 7SR5 Before V2.70 is affected by multiple vulnerabilities. Siemens has released a new version for Reyrolle 7SR5 and recommends to update to the latest version. The following versions of Siemens Reyrolle 7SR5 are affected:
Digital Watchdog VMAX DVR and NVR Product Lineups
View CSAF Summary Successful exploitation of these vulnerabilities could grant full administrative control of the device, allowing an attacker to view live and recorded surveillance, alter device configurations, and use the device as a network pivot point. Th
CareCam CM2507
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to access live video and sensitive device information, enable unauthorized services, execute arbitrary code, modify device operation, and recover stored credentials. Th
NIST Finalizes Guidelines on Protecting Online Identity and Access Tokens From Misuse
When you sign in to an online service like webmail, behind the scenes is often a token a snippet of information identifying you and what online resources you are permitted to use, such as your inbox,
mySCADA myPRO Manager
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to access privileged management functions or send arbitrary SMS messages through the connected GSM modem. The following versions of mySCADA myPRO Manager are affected:
Siemens Teamcenter
View CSAF Summary A reflected cross site scripting vulnerability in the authentication redirect flow (/auth/) of Teamcenter allows an unauthenticated remote attacker to inject JavaScript into an authenticated user's session by crafting a malicious URL. Succes