Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Haiwell IoT Cloud HMI Gateway OS Command Injection
A vulnerability in Haiwell IoT Cloud HMI Gateway allows attackers to inject and execute arbitrary OS commands with root privileges.
Hitachi Energy APM Edge Hit by Dirty Frag Flaws
Hitachi Energy disclosed Dirty Frag vulnerabilities affecting APM Edge products, potentially impacting confidentiality, integrity, and availability.
Siemens Siveillance Video RCE Flaw Fixed
Siemens Siveillance Video Management Servers have a remote code execution vulnerability. Siemens released updates and urges users to upgrade.
ANDRITZ HIPASE-250 Vulnerabilities Allow Data Access
Vulnerabilities in ANDRITZ HIPASE-250 and 250 SCALA could let attackers read device data or access workstations. Affected versions are listed.
Siemens Simcenter Femap Flaws Allow Code Execution
Two file parsing vulnerabilities in Siemens Simcenter Femap can be triggered via malicious BMP files, potentially leading to code execution.
Siemens Parasolid Flaw Allows Code Execution
Siemens Parasolid has an out-of-bounds read vulnerability in X_T file parsing, potentially enabling crashes or arbitrary code execution.
Siemens Solid Edge Flaws Allow Code Execution
Multiple file parsing vulnerabilities in Siemens Solid Edge can be triggered via crafted PAR, PSM, or DFT files, leading to crashes or arbitrary code
lurescope phishing tool added to PyPI
lurescope, a new phishing detection tool, has been added to PyPI. It focuses on production viability beyond simple fraud scores.
Team8 Raises $365M, Nears $2B AUM
Israeli venture firm Team8 secured an additional $365 million, bringing its total assets under management to nearly $2 billion since 2014.
Attackers Exploit SharePoint Auth Bypass After PoC
Threat actors are exploiting CVE-2026-55040, a critical SharePoint authentication bypass, after a public PoC was released.
WindRelay Android malware relays NFC card data in real time
Group-IB discovered WindRelay, an Android malware family that captures NFC card data and relays it to attackers in real time, enabling fraudulent tran
DOGE Savings Claims Questioned by GAO
The GAO reports that Elon Musk's DOGE initiative has not delivered promised savings and may have increased costs.