Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in each product's web application root directory. The attacker must already know a file's exact name and path and cannot list what the directory holds
FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach
The U.S. Federal Bureau of Investigation (FBI) has removed an Accenture contractor for their alleged role in a ShinyHunters-breach that led to the theft of personal details of thousands of bureau employees. That's according to a report from Reuters, citing two sources familiar with the matter. "To
Meta’s Muse Is An Adorable Privacy And Security Dumpster Fire
Meta’s agentic AI product Muse has had a rocky few weeks since launch. The product, which features an animated avatar named Jolly (one presumes to make mass hyper surveillance seem adorable) is supposed to help you offload busywork like making restaurant rese
Hackers suspected of using AI agents for cyberattacks on South Korean banks, exposing data from about 25,000 customers
Cyberattacks using AI agents against several of the largest South Korean banks, including Hana Bank, KB Kookmin Bank, and Shinhan Bank, are currently being investigated by South Korean authorities. A
Facebook Marketplace scam uses your name and number
Facebook users are reporting receiving a message with a fake Facebook Marketplace listing that has their name as the seller. It works like this. You receive a message (in this case iMessage) asking
Cybersecurity stocks hit new highs as AI agents spark 'biggest risk today': Chart of the Day
Cybersecurity stocks have been on fire this year, fueled by AI-driven spending and growing warnings from tech giants about the risks of increasingly powerful agents. The First Trust Cybersecurity ETF (CIBR) reached an all-time high on Monday as the tech-heavy
Why Sam Altman takes his hardest questions to Nikesh Arora
Nikesh Arora has a knack for piercing directness. I profiled the Palo Alto Networks CEO for our latest issue. A tech veteran leading the only pure-play cybersecurity company in the Fortune 500, Arora has a “tell it to you straight” posture that has made him
Hitachi Energy RTU500
View CSAF Summary Hitachi Energy is publishing this cybersecurity advisory in response to the security findings reported by Dragos affecting end-of-life RTU500 CMU firmware version 9.x. The reported findings are associated with legacy RTU500 firmware versions
Fortune Unveils the "Fortune Future 120" 2026 List
Cyera ranks No. 1 in the global ranking; annual list spotlights companies best positioned to deliver sustained, long-term growth U.S. companies dominate tech-heavy list, with 8 in the Top Ten, and 86 of the total Fortune Future 120 By region, North America by
Savannah lwIP SMTP client
View CSAF Summary Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution. The following versions of Savannah lwIP SMTP client are affected: lwIP SMTP client 2.2
Security Journey Announces Second Annual Security Champions Summit
Two-day virtual event explores the next evolution of security champion programs as AI changes how organizations build, work and manage risk. RALEIGH, N.C., Oct. 6, 2026 /PRNewswire/ -- Security Journey, a leader in secure code training and secure development
Johnson Controls EasyIO FG
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain full unauthorized access to the device. The following versions of Johnson Controls EasyIO FG are affected: EasyIO FG firmware