Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
PoC Exploit Released for GitLab Remote Code Execution
Researchers released a proof-of-concept exploit for a GitLab vulnerability patched on June 10.
Insurance Phishing Campaigns Shift to Real-Time Account
CTM360 research indicates that insurance-focused phishing has evolved from credential harvesting to real-time account hijacking, enabling immediate un
Cl0p Affiliates Exploit PTC Windchill and FlexPLM via
Threat actors linked to the Cl0p ransomware group are exploiting vulnerabilities in internet-exposed PTC Windchill and FlexPLM software to conduct dat
Funky Mantis Group Operates DevMan Ransomware-as-a-Service
Cybersecurity firm PRODAFT is tracking the DevMan RaaS operation, which utilizes a centralized web portal for affiliates to generate payloads, manage
SourTrade Malvertising Campaign Uses Browser Memory to
A malvertising campaign targeting crypto investors uses malicious JavaScript and ServiceWorkers to assemble unique malware payloads directly within th
Scammers use leaked ShinyHunters data to fuel $2,000
Threat actors are leveraging email addresses from previous ShinyHunters data breaches to send fraudulent sextortion emails demanding $2,000 in Bitcoin
OpenAI Services Experience Global Outage Affecting ChatGPT
On July 25, 2026, OpenAI services including ChatGPT, Codex, and 12 API endpoints suffered a worldwide outage lasting approximately 50 minutes.
Pope's Click To Pray app leaks data of over 700,000 users
The official Click To Pray app exposes the personal data of 719,517 users due to an unpatched IDOR vulnerability that allows unauthorized access to ac
Europol removes 4,340 URLs linked to The Com criminal
Europol and international partners flagged 4,340 URLs associated with The Com, a network known for recruiting minors to commit cybercrimes, swatting,
Communication Gaps Persist Between CISOs and Corporate
Escalating cybersecurity threats are driving boards to prioritize security, yet significant communication gaps remain between leadership and security
No new cybersecurity developments reported in recent blog
A blog post regarding Falkland Islands squid catch levels contained no new cybersecurity news or industry updates.
BlueNoroff Uses Zoom Phishing Kits to Profile Crypto
North Korean threat actor BlueNoroff is using typosquatted Zoom and Microsoft Teams domains in a phishing campaign to profile crypto wallets before de