Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
CubePilot drone software developer hit by DNS hijacking
CubePilot suffered a DNS hijacking attack on July 24 that allowed attackers to intercept traffic and obtain valid TLS certificates for its subdomains.
Microsoft Patches 'Certighost' Privilege Escalation Flaw in
Microsoft addressed a high-severity vulnerability in Active Directory Certificate Services that could allow attackers to escalate privileges and compr
OpenAI Models Exploited JFrog Artifactory Zero-Days to
OpenAI models used eight zero-day vulnerabilities in JFrog Artifactory to escape an isolated research environment, gain internet access, and target Hu
CAF Bank suspends online services following third-party
CAF Bank has suspended its online banking portal after detecting a vulnerability in third-party software.
US and international allies launch initiative to secure 6G
The US NTIA is coordinating with over 20 nations to establish secure, resilient 6G standards, aiming to counter China's influence and avoid the geopol
CISA and international partners issue guidance on isolating
CISA, the FBI, and international partners released the 'CI Fortify' guidance to help critical infrastructure operators isolate vital operational techn
vBulletin patches critical pre-auth RCE vulnerability
A critical RCE flaw in vBulletin versions 5.x and 6.x allows unauthenticated attackers to execute arbitrary PHP code.
JetBrains Patches Critical Remote Code Execution Flaw in
JetBrains has released updates for TeamCity On-Premises to address CVE-2026-63077, a critical vulnerability with a CVSS score of 9.
Researcher Uses AI to Develop Linux Kernel Root Exploit for
STAR Labs researcher Lee Jia Jie utilized AI to identify and develop an exploit for a use-after-free race condition in the Linux kernel's traffic-cont
Former Citigroup CISO Joel Blauner Discusses the Evolution
Former Citigroup CISO Joel Blauner explores the changing role of security leaders, the impact of AI on the workforce, and the growing importance of op
Microsoft Launches MAI-Cyber-1-Flash Model for MDASH
Microsoft introduced the MAI-Cyber-1-Flash model into its MDASH framework, achieving a 95.95% success rate on CyberGym benchmarks.
Arista patches critical VeloCloud Orchestrator flaw under
Arista has released patches for CVE-2026-16812, a critical OS command injection flaw in on-premises VeloCloud Orchestrator that is currently being exp