Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Microsoft: KB5087537 update breaks domain controller
Microsoft confirmed that the May 2026 security update KB5087537 causes domain controller lookup failures on Windows Server 2016 systems with 15-charac
7-Eleven data breach exposes personal information of
The ShinyHunters extortion gang breached 7-Eleven's Salesforce environment in April 2026, leaking personal data of 185,300 individuals after the compa
Linux Kernel, Microsoft Defender Hit by Exploited Zero-Days
Critical zero-day vulnerabilities in Linux kernel and Microsoft Defender were actively exploited, allowing privilege escalation and remote code execut
Ghost CMS SQL Injection Vulnerability Exploited for
Attackers are actively exploiting CVE-2026-26980, a critical SQL injection flaw in Ghost CMS, to hijack over 700 sites and redirect users to malicious
AI Enhances Network Detection and Response, Reducing Alert
Advanced Network Detection and Response (NDR) solutions are now using agentic AI to significantly improve threat detection and reduce false positives.
Lazarus Group uses new memory-only RAT, RemotePE, against
North Korea's Lazarus Group is using RemotePE, a new memory-resident RAT, to target financial and cryptocurrency firms.
Dutch Authorities Seize 800 Servers and Arrest Two Linked
Dutch police arrested Andrey Nesterenko and Youssef Zinad for allegedly providing infrastructure to Russian-backed groups, including hosting services
Anthropic Prepares Public Rollout of High-Risk Mythos AI
Anthropic is integrating its powerful Mythos model into Claude Code and Claude Security after developing guardrails to mitigate risks associated with
TrapDoor Supply Chain Attack Spreads Credential Stealer via
A coordinated supply chain attack named TrapDoor has distributed credential-stealing malware through 34 malicious packages across npm, PyPI, and Crate
Anthropic Plans Future Public Release of Mythos
Anthropic intends to release its Mythos bug-finding AI to the public once sufficient safety measures are developed.
FBI warns of Kali365 phishing service targeting Microsoft
The FBI issued a warning regarding the Kali365 phishing-as-a-service platform, which exploits OAuth device code authentication to hijack Microsoft 365
Ghost CMS SQL Injection Flaw Exploited in Large-Scale
A critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS is being exploited to compromise over 700 domains, using ClickFix lures to trick