Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Cisco patches critical 10.0 CVSS vulnerability in Secure
Cisco disclosed CVE-2026-20223, a critical flaw in Secure Workload allowing unauthenticated attackers to gain Site Admin privileges via crafted API re
Underminr Technique Uses CDN Domain Fronting for Brand
The Underminr attack technique exploits Content Delivery Networks to mask malicious traffic as legitimate requests.
Microsoft open-sources RAMPART and Clarity tools for
Microsoft released RAMPART, a framework for automated red-teaming of AI agents, and Clarity, an agent designed to help developers evaluate architectur
Dormant account access leads to unauthorized control of
A threat actor gained domain admin and SCADA access to a city's water utility by compromising a dormant account belonging to a former employee who reu
Cybersecurity Professionals Divided Over AI's Dual Role in
Cybersecurity experts are split on AI's impact, balancing its potential to improve threat detection against the risk of attackers using it to create s
GitHub Confirms Theft of 4,000 Internal Repositories
GitHub has confirmed a data breach involving the unauthorized access and theft of approximately 4,000 internal code repositories.
Malicious Android Apps Use WebView Automation to Commit
Researchers identified fake Android apps that use WebView automation and JavaScript injection to subscribe users to premium services without consent.
Process and Culture Failures Identified as Primary Drivers
New research indicates that internal procedural failures and organizational culture, rather than technical vulnerabilities, are the leading causes of
Critical Command Injection Flaw CVE-2023-20198 Affects
A critical command injection vulnerability, CVE-2023-20198, allows unauthenticated attackers to gain remote control over industrial robots.
Evaluating AI Security Through Established Software
Current AI security benchmarks are insufficient for measuring systemic risk.
CISOs Advised to Prepare for Agentic-Ready AI Bill of
Organizations are being urged to evolve AI Bill of Materials (BOMs) to include dynamic execution behaviors and training data provenance alongside stat
Interpol Leads Operation Ramz to Combat Cybercrime Across
Interpol coordinated a large-scale, multi-country operation across the Middle East and North Africa to disrupt financial fraud and online scams.