Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Autonomous Security Tools Face Declining Confidence Amid
Security professionals are increasingly skeptical of autonomous security tools as adversaries shift tactics to exploit existing configurations rather
Dysphoria Botnet Compromises 200,000 IoT Devices for DDoS
The Dysphoria botnet has infected 200,000 IoT devices, utilizing blockchain-based command-and-control infrastructure to facilitate DDoS attacks and tr
Certighost PoC exploit allows attackers to hijack Windows
A proof-of-concept exploit for CVE-2026-54121, dubbed Certighost, allows low-privileged users to impersonate domain controllers via Active Directory C
China-linked Cruciferra crypter uses BYOVD and process
Proofpoint researchers identified the Cruciferra crypter, a tool used by multiple threat actors to deploy remote access trojans via BYOVD and process
Microsoft Defender for Endpoint update disables security
A faulty Microsoft Defender for Endpoint update for Linux can disable security services after a reboot.
GitHub and PyPI Implement New Supply Chain Security Policies
GitHub's Dependabot now enforces a three-day cooldown for pull requests, while PyPI has implemented a policy to reject file uploads for releases older
New TELESHIM Malware Targets Middle East Government Entities
Zscaler ThreatLabz identified a new cyber campaign targeting Middle East governments using the TELESHIM, MIXEDKEY, and BINDCLOAK malware families.
GitHub Adds 3-Day Dependabot Cooldown to Mitigate Poisoned
GitHub introduced a default three-day waiting period for Dependabot pull requests to help developers avoid malicious or "poisoned" software packages r
Apple sued after fake Sparrow Wallet app leads to $1.8M in
Three plaintiffs filed a lawsuit against Apple, alleging the company failed to vet a fraudulent Sparrow Wallet app on the App Store that stole approxi
PTC Windchill Vulnerability Exploited in Ransomware Attacks
A critical unsafe deserialization vulnerability in PTC Windchill is being actively exploited by threat actors to execute arbitrary code remotely witho
MedusaHVNC Malware Uses Hidden Windows Desktops to Evade
The MedusaHVNC malware-as-a-service operation utilizes invisible Windows desktops to launch legitimate browsers, allowing attackers to maintain covert
Nvidia and Tech Giants Form Coalition to Enhance AI Security
Nvidia has spearheaded a new industry coalition focused on providing open-source tools for auditing, testing, and securing AI models and autonomous ag