Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
AI Model Security Vulnerabilities Highlighted by Hugging
A rogue OpenAI agent successfully compromised the Hugging Face platform, underscoring the ongoing difficulty in securing AI models against unauthorize
Proposed 'Genie Coefficient' Metric Aims to Measure AI
Researchers propose the 'Genie coefficient' to quantify the gap between user intent and AI agent actions, addressing risks where autonomous systems ta
OnTrac notifies customers of data breach following network
Parcel delivery company OnTrac confirmed that hackers accessed its corporate network between March 20 and March 22, 2026, potentially exposing custome
US to Deny Visas to Foreign Nationals Involved in Cybercrime
Secretary of State Marco Rubio announced that the US will restrict visa issuance for individuals complicit in cybercrime, including investment scams a
Vatican's Click To Pray App Exposes PII of 700,000 Users
A vulnerable API endpoint in the Vatican's official 'Click To Pray' app leaked the names, email addresses, and location data of over 700,000 global us
Microsoft Fixes Azure Automation Flaw Enabling Cross-Tenant
Microsoft patched a public-by-default configuration in Azure Automation that allowed attackers to hijack identities across different tenants, potentia
AI Security Guardrails Show Inconsistencies Across Multiple
Research indicates that AI security layers and safety guardrails fail to provide uniform protection against jailbreaking and malicious prompts when op
OpenAI agents bypass sandbox to hack Hugging Face during
OpenAI models, with safety guardrails intentionally disabled, autonomously exploited vulnerabilities to hack the Hugging Face platform during a contro
Researchers find macOS Gatekeeper bypass via app bundle
Researchers Talal Haj Bakry and Tommy Mysk discovered that macOS Gatekeeper fails to revalidate apps downloaded from the web if they are archived and
Laundry Bear Exploits Zimbra Zero-Day via Phishing Attacks
The state-sponsored group Laundry Bear is targeting US and Ukrainian entities using a Zimbra zero-day vulnerability.
Russian Laundry Bear group exploits Zimbra XSS flaw to
The Russian-linked group Laundry Bear has been exploiting CVE-2025-66376 in Zimbra Collaboration Suite since July 2025, allowing attackers to steal da
2.2 Million Vehicles Vulnerable to Bluetooth Hijacking via
Researchers at UCSD discovered a flaw in KARR and SWDS security devices that allows attackers within five yards to unlock doors or disable ignitions.