Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Myspace93 breach exposes plaintext credentials of 46,000
A 2021 breach of the Myspace93 parody site resulted in the exposure of 46,000 users' plaintext passwords, email addresses, and IP addresses.
Chinese APT Group Showboat Deploys CAPTAIN-MORGAN Backdoor
The Chinese APT group Showboat is utilizing a custom Linux backdoor called CAPTAIN-MORGAN to conduct espionage against telecommunications providers in
Cisco patches critical 10.0 CVSS vulnerability in Secure
Cisco disclosed CVE-2026-20223, a critical flaw in Secure Workload allowing unauthenticated attackers to gain Site Admin privileges via crafted API re
Underminr Technique Uses CDN Domain Fronting for Brand
The Underminr attack technique exploits Content Delivery Networks to mask malicious traffic as legitimate requests.
Microsoft open-sources RAMPART and Clarity tools for
Microsoft released RAMPART, a framework for automated red-teaming of AI agents, and Clarity, an agent designed to help developers evaluate architectur
Dormant account access leads to unauthorized control of
A threat actor gained domain admin and SCADA access to a city's water utility by compromising a dormant account belonging to a former employee who reu
Cybersecurity Professionals Divided Over AI's Dual Role in
Cybersecurity experts are split on AI's impact, balancing its potential to improve threat detection against the risk of attackers using it to create s
GitHub Confirms Theft of 4,000 Internal Repositories
GitHub has confirmed a data breach involving the unauthorized access and theft of approximately 4,000 internal code repositories.
Malicious Android Apps Use WebView Automation to Commit
Researchers identified fake Android apps that use WebView automation and JavaScript injection to subscribe users to premium services without consent.
Process and Culture Failures Identified as Primary Drivers
New research indicates that internal procedural failures and organizational culture, rather than technical vulnerabilities, are the leading causes of
Critical Command Injection Flaw CVE-2023-20198 Affects
A critical command injection vulnerability, CVE-2023-20198, allows unauthenticated attackers to gain remote control over industrial robots.
Evaluating AI Security Through Established Software
Current AI security benchmarks are insufficient for measuring systemic risk.