Blog & Resources

Security awareness tips, phishing prevention guides, and best practices.

Phishing

8 insights from Proofpoint Protect: Security bets on intent as AI agents join the workforce

At this week’s Proofpoint Protect event, the security debate moved beyond whether enterprises will deploy AI agents to how they will govern them. Attackers now use AI to write flawless phishing lures and chain exploits at machine speed. Meanwhile, the agents

1 min read 4 views Sep 24
Phishing

'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing

Agentic AI can smuggle arbitrary instructions from the Web, across multiple apps, into trusted internal communications channels.

1 min read 8 views Sep 24
Other

AirBoss Announces Amended and Restated Credit Facilities

NEWMARKET, Ontario, Sept. 24, 2026 (GLOBE NEWSWIRE) — AirBoss of America Corp. (TSX: BOS) (OTCQX:ABSSF) (the “Company” or “AirBoss”) today announced the renewal and amendment of its existing senior secured credit facilities. The renewed facilities consist of

1 min read 4 views Sep 24
Phishing

Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing

Security flaws in Salesforce Agentforce allowed poisoned leads to hijack its AI agents, silently steal CRM data without requiring a click, and send phishing messages under the agents’ identities. Zenity Labs uncovered the three vulnerabilities, collectively called SalesBleed, and reported them to Sa

5 min read 4 views Sep 24
AI Security

AI Will Save Us, or Not? - PSW #945

In the security news this week: Build your own router, or just buy one What to patch first But maybe don't buy D-Link AI nearly starts a war Flock cameras lose their keys The AI slowdown won’t save bad sec

1 min read 4 views Sep 24
Other

socio added to PyPI

A required part of this site couldnt load. This may be due to a browser extension, network issues, or browser settings. Please check your connection, disable any ad blockers, or try using a diffe

1 min read 8 views Sep 24
Other

Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content

The "third-party[.]com" domain, commonly used as a documentation placeholder, has been observed serving a ClickFix lure to Windows browsers while displaying a harmless decoy to other users. "third-party[.]com has been a generic documentation placeholder for years, the same role example.com plays,"

1 min read 4 views Sep 24
AI Security

The PGA of America limits AI sprawl with a streamlined identity architecture

Identity security becomes more important when AI agents start acting across enterprise systems. That challenge can be especially acute for smaller technology teams that cannot dedicate large teams to infrastructure, security and identity management. The Profe

1 min read 4 views Sep 24
Policy & Law

Ryuk Member Karen Vardanyan Sentenced to Two Years in U.S. Prison

Ryuk member Karen Vardanyan was sentenced to 24 months in U.S. prison after extradition from Ukraine and ordered to pay $1.2M in restitution. Karen Vardanyan, a 35-year-old Armenian citizen who went by “Maneeken” and, oddly, “Karl Lagerfeld” online, was extra

1 min read 6 views Sep 24
Other

Air Canada Welcomes Expanded Air Transport Agreement Between Canada and Vietnam

Airline seeks to launch scheduled service to Ho Chi Minh City  MONTRÉAL, Sept. 24, 2026 (GLOBE NEWSWIRE) — Air Canada today welcomed the Government of Canada’s announcement of an expanded Air Transport Agreement between Canada and Vietnam. Reflecting the stro

1 min read 4 views Sep 24
Other

RCMP says no sign of interrupted investigations following FBI's outcry over CBC

The head of the RCMP says there's no evidence to suggest investigations were impacted following a report last week that FBI Director Kash Patel temporarily halted co-operation with the Mounties in retaliation for an internal CBC memo.

1 min read 4 views Sep 24
Phishing

Data & AI Architecture Focus: 6 Best Brand Protection Tools for Phishing and Impersonation

Brand protection means different things to different teams. A legal team may need to remove counterfeit marketplace listings. A security team may need to find a fake login page, a fraudulent social profile, or a rogue application impersonating the company. Th

1 min read 7 views Sep 24

Want to learn more?

Start your free trial and see Phishlens in action.