Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Joinable Labs launches Joinable Security with Threat Map
Joinable Labs unveiled Joinable Security, featuring Joinable Threat Map for community threat intelligence and Joinable Runbooks for AI-driven incident
24K BMC Interfaces Expose Auth Hashes Before Login
Over 24,000 internet-accessible BMC management interfaces leak authentication hashes pre-login, risking data center compromise.
Coldcard firmware flaw linked to $130M Bitcoin losses
A firmware defect in Coinkite Coldcard wallets has been traced to $130 million in Bitcoin losses, exposing risks in single-device key generation.
Securonix adds AI agent detection, cuts SIEM data costs
Securonix enhances its Unified Defense SIEM with Governed AI Agent Detection and Response, expanded Threat Analytics for Microsoft Sentinel, and lower
Guide: Upgrade ESXi 7.x/8.x to 8.0U3k via CLI
A guide explains how to upgrade VMware ESXi hosts from 7.x or 8.x to the latest 8.0U3k using a depot.
FBI Supervisor Charged in $1M Crypto Theft Case
Patrick Yaroch, a former FBI counterintelligence supervisor, is accused of stealing over $1 million in cryptocurrency from the bureau, raising questio
Uptime Kuma 2.5.0 delays npm package trust by two weeks
Uptime Kuma 2.5.0 introduces a two-week delay before trusting a new npm package, likely to mitigate supply-chain risks from malicious or compromised d
Iran-linked hackers likely behind US water plant attacks,
Iran-backed hackers are likely responsible for attacks on dozens of US water systems, including a Minnesota plant shutdown, and may continue their cam
India to Mandate V2V Communication in New Vehicles to
India plans to require vehicle-to-vehicle (V2V) communication in new cars, enabling them to share speed and braking data to help prevent collisions, c
Indusface Launches SwyftComply AI for Autonomous
Indusface introduces SwyftComply AI, an AI-powered solution that automates virtual patching and SLA-backed remediation, reducing vulnerability discove
Microsoft ties hotel Wi-Fi attacks to Midnight Blizzard
Microsoft attributes the CaptiveCrunch hotel Wi-Fi campaign to Russia-linked Midnight Blizzard, using custom malware to target Microsoft 365 accounts
Microsoft Teams adds 'Report a concern' button for deepfake
Microsoft Teams introduces a 'Report a concern' feature to flag phishing, impersonation, scams, social engineering, deepfakes, and suspicious activity