Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Megalodon Malware Campaign Compromises Over 5,500 GitHub
A rapid six-hour malware campaign dubbed 'Megalodon' injected malicious code into over 5,500 GitHub repositories.
TeamPCP Group Deploys Shai-Hulud Worm Against Open-Source
The threat actor TeamPCP is spreading the Shai-Hulud worm by exploiting long-standing vulnerabilities in open-source software.
Microsoft Releases Out-of-Band Patch for Critical
Microsoft issued an out-of-band security update to address CVE-2023-29357, a critical remote code execution flaw in SharePoint Server that allows unau
AI Enhances DDoS Attacks, Requiring New Defense Strategies
Attackers are using AI to identify vulnerabilities and launch more sophisticated, adaptive DDoS attacks that can overwhelm traditional defenses.
Microsoft Patches Critical SharePoint RCE Vulnerability
Microsoft has released patches for CVE-2026-45659, a critical RCE vulnerability in SharePoint.
KnowledgeDeliver LMS Zero-Day Exploited to Deploy Godzilla
Attackers exploited a critical deserialization zero-day (CVE-2026-5426) in KnowledgeDeliver LMS, caused by hardcoded machine keys, to achieve remote c
MFA Prompt Bombing Exploits User Fatigue for Access
Attackers are using 'MFA prompt bombing' to overwhelm users with repeated login requests, tricking them into approving malicious access attempts throu
Charter Communications confirms data breach following
Charter Communications confirmed a security incident after the ShinyHunters group claimed to have stolen 40 million customer records.
Researchers demonstrate human identification using Wi-Fi
Researchers at KIT have developed a method to identify and image people within an environment by analyzing the reflection and absorption patterns of W
India Mandates 12-Hour Patching for Internet-Facing Flaws
CERT-In now recommends organizations patch critical internet-facing vulnerabilities within 12 hours due to the rise of AI-assisted attacks.
Experts question Nigel Farage's claims of Russian
Digital forensics experts and former NCSC officials have challenged Nigel Farage's unsubstantiated claims that Russian state actors hacked his phone t
AppOmni Launches Marlin AI for SaaS Security Investigation
AppOmni introduced Marlin AI, a tool designed to automatically analyze SaaS misconfigurations and investigate enterprise-wide activity.