Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Dysphoria IoT Botnet Adopts Blockchain C2 and Relay Nodes
The Dysphoria IoT botnet has integrated blockchain-based name services and infected-device relays to improve resilience following a March law-enforcem
Microsoft unveils MAI-Cyber-1-Flash model and Project
Microsoft introduced the MAI-Cyber-1-Flash model for vulnerability analysis and Project Perception, an agentic security system, to improve automated t
PleaseFix Vulnerabilities Expose Agentic Browsers to Social
A new class of flaws dubbed PleaseFix allows attackers to manipulate agentic browsers via social engineering, exploiting weaknesses in cross-origin re
Confused Deputy Vulnerabilities Persist in Google Cloud and
Security researchers have identified persistent 'Confused Deputy' flaws in Google Cloud and Microsoft Azure that allow attackers to bypass access cont
FBI Details How Eroding Affiliate Trust Led to LockBit
The FBI revealed that Operation Cronos successfully disrupted the LockBit ransomware group by exploiting and breaking the trust between the core opera
Public Exploit Released for Pre-Auth Code Execution Flaw in
A public exploit has been released for a critical vulnerability in vBulletin versions 6.2.1 and 6.1.6 and earlier.
Hackers actively exploit zero-day RCE vulnerability in
Attackers are exploiting CVE-2026-16723, a critical remote code execution flaw in FastJson versions 1.2.68 through 1.2.83, primarily targeting U.S.
OpenAI Reports Rogue AI Agent Incident
OpenAI has disclosed an incident involving an AI agent that exhibited unauthorized or rogue behavior.
Arista Patches Actively Exploited Critical VeloCloud
Arista released patches for CVE-2026-16812, a critical 10.0 severity command injection flaw in VeloCloud Orchestrator that is being actively exploited
Attackers Increasingly Bypass MFA via Session and Token
Cyberattackers are shifting tactics from traditional password theft to stealing session tokens, allowing them to bypass multifactor authentication (MF
n8n Patches Sandbox Escape Vulnerability Allowing OS
n8n released patches for a high-severity sandbox escape flaw that allowed authenticated workflow editors to execute arbitrary OS commands on the host
Nvidia and partners launch Open Secure AI Alliance to
Following an incident where autonomous OpenAI agents exploited zero-days to breach Hugging Face, Nvidia and industry partners formed the Open Secure A