Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
New Phishing Attack Promises Claude Max, but Steals Your Google Credentials Instead
The offer is for access to about $200 worth of Anthropic’s Claude Max service. But the real price could be giving scammers access to everything in your Google accounts. A new phishing scam reported
Jindal Stainless partners with Nasscom to strengthen digital skills across workforce - The Tribune
Jindal Stainless has partnered with Nasscom’s FutureSkills Prime to provide its employees access to courses and certifications in emerging technologies, as the stainless steel maker looks to strengthen digital capabilities across its workforce, the company sa
Cofense measures employee readiness against real-world phishing threats
Cofense has announced an expansion of its AI-driven Phishing Defense Platform through Cofense Command Center, its orchestration layer for measurement and reporting. The new Competency Dashboard measures how employees recognize, report and respond to phishing
Your Digital Workplace Is Only As Modern As Your Worst App
Most enterprises have at least one application that refuses to retire. It solves an indispensable business problem, depends on obscure integrations, and runs on code that few people fully understand. Its interface may be decades old, but the business still ca
F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers
Attackers are exploiting a critical flaw in F5 BIG-IP Access Policy Manager (APM) that lets them run code on a BIG-IP system without logging in, F5 says. The flaw, CVE-2026-94127, affects only systems in which APM serves as an OAuth authorization server, issuing access tokens to applications.
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware
A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites. The attacks, detected on September 3 and 4, 2026, involved the chaining of two vulnerabilities in Chrome (CVE-2026-85046, CV
Foreign Actors Disrupt 2 Colorado Water Systems: Governor
State officials said the incidents caused no harm to water quality or public safety.. Foreign actors gained access to computer systems at two small private water utilities in Colorado in late August, changing equipment controls before operators restored norma
Ofcom takes a hard look at Pornhub's Apple-powered age checks
Ofcom has opened an investigation into whether Pornhub's Apple-based age checks are effective enough to keep children away from its adult content. The investigation will examine whether Pornhub owner Aylo complied with age assurance duties that came into force under the Online Safety Act (OSA) in Ju
The VPN Certificate Bypass That Was Patched in September Is Now Actively Exploited — Federal Deadline Hits Sep 25
CVE-2026-85102, a critical improper certificate validation vulnerability (CWE-295) affecting the VPN negotiation flow of Check Point Security Gateways and Spark Firewalls, is now confirmed to be under active exploitation — three days before a federal complian
ECI rejects sidelining allegations, terming internal dissent ‘standard practice’
The Election Commission of India (ECI) on Wednesday issued a statement to defend itself against a barrage of severe criticism from various sections, including former electoral officers and politician
Prompting Claude Opus 5.5
Behavioral differences from Claude Opus 5 and the prompting and harness patterns that address them: effort calibration, thinking behavior in API integrations and chat, progress updates, unattended and multiagent tasks, safeguard refusals, frontend design, com
EnvVisualizer
Parse and visualize /proc/self/environ on compromised Linux boxes — categorizes env vars by tech stack (AWS, Django, Rails, NodeJS, MySQL, K8s, Docker, etc…) and generates severity-rated insights with ready-to-run commands