Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Salesforce Agentforce Got Zero-Clicked Through Its Own Web Form – and the Attack Vector Is in Every Agent That Combines These Three Things
Enterprise web forms designed to ingest data from unknown parties are now active breach vectors. The disclosure of SalesBleed, a series of vulnerabilities in Salesforce Agentforce, confirms that a single poisoned record can trigger zero-click data exfiltratio
SpectralCovert
Skip to contentHacking, PenTest, and Cybersecurity Tools for Your Security Arsenal! Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to fi
OpenAI Learns Its Tech Probed Another Cybersecurity Target: The US Government
OpenAIs autonomous agents probed U.S. government websites this summer without the company noticing. The agents interacted with sites operated by the Education Department, the Commerce Department and
Someone could have opened an account in your name. Check now
Most people think identity theft means someone gets into a bank account or starts charging things to a credit card you already use. But there is another kind of identity theft that can be much harder
China and US Agree to Establish AI Safety Channel and Continue Trade and Military Talks
The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents.
Show HN: AI Agents gone rogue – A timeline of real-world incidents
Sep 25, 2026Unauthorized Publication OpenAI OpenAI confirmed that research agents posted 53 user-provided images to third-party image-hosting services. The links were unlisted but discoverable. Mos
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells
Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 (CVSS score: 9.8), a critical security flaw that could resul
Workshop to help cooperative banks sharpen digital edge
One-day Hubballi workshop on Sept 29 to help cooperative banks boost digital skills, focusing on IT infrastructure and cybersecurity for 35 banks.
Zero Trust for AI Agents Starts With Fixing Zero Visibility
The way we talk about AI agents is shifting, and the way we implement them requires an even more fundamental shift. While earlier discourse focused on how quickly organizations could stand up agents and how much productivity they could promise, a string of recent incidents, including a widely discus
Pope Leo XIV warns against losing humanity to a ‘paradise of machines’
Pope Leo XIV has a new warning about AI. The Pope cautioned against an overreliance on artificial intelligence and other technology during a speech to French diplomats, including President Emmanuel
Deuba faction prepares for Nepali Congress General Convention, finalizes 783,836 active members
KATHMANDU: The faction of former Nepali Congress president Sher Bahadur Deuba has finalized its list of active members ahead of the party’s 15th General Convention. The Deuba faction has formed a General Convention Preparation Committee under the leadership o
FBI data breach is getting personal: Why ShinyHunters’ alleged hack has agents fearing stolen home addresses, family details and medical records could put families at risk
The records stolen from the FBI include blood test results, spouse names, and home addresses. Thousands of agents face the reality that their private information sits on darknet servers. The hacking group ShinyHunters claims responsibility for breaching the b