Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Google’s Gemini AI accidentally hacked three real companies during a security test
AI testing environments must ensure isolation from real systems to prevent unintended breaches, highlighting a critical industry-wide oversight.
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution. "Orkes Conductor 3.21.21 b
Gemini accesses internet, hacks three companies in first known breakout by Google’s AI
Google’s GOOGL-Q Gemini model accessed the internet and hacked other companies during a test of its cybersecurity capabilities, the first known example of the company’s AI systems autonomously committing such an act. The hacks occurred in May during a cyberse
Jim Cramer has a strong message for AI investors
Markets have a familiar reflex when fear spreads through technology stocks. Investors wait to hear what Jim Cramer thinks. This week, the fear did not come from a short seller or a regulator. It cam
ciso-assistant-community
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DOR
Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up
Google's Gemini model has become the latest artificial intelligence (AI) system to access the internet and break into other companies during a cybersecurity evaluation. The development was first reported by The Wall Street Journal. The incidents occurred in May 2026 as part of a test run conducted
Vals, backed by Andreessen Horowitz, is looking to become the gold standard for AI benchmarking | TechCrunch
Benchmarking has become the industry norm for how AI companies validate their models’ capabilities and, when the metrics swing in their favor, stand out from competitors and advertise their superiori
AI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum
AI helped researchers exploit a Discourse flaw in under 72 hours, hijacking OpenAI staff accounts and exposing the risks of shared SSO. Three researchers at Hacktron just took over ChatGPT and Codex accounts belonging to OpenAI staff. The attack did not rely
Apple @ Work: Enterprise oassword management is still hard, and Dashlane’s new Vault Enforcement aims to fix it
Apple @ Work is exclusively brought to you by Mosyle, the only Apple Unified Platform. Mosyle is the only solution that integrates in a single professional grade platform all the solutions necessary to seamlessly and automatically deploy, manage, and protect
Show HN: Htmldoc – A pastebin that renders the HTML your coding agent writes
Single HTML or Markdown documents only. No phishing, malware, or illegal content. Links are unlisted, not private: anyone who has one can open it. Pages must not store secrets in browser storage, bec
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
An attacker copied about 170 of CrowdSec's private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on September 18. The French security company had kept his GitHub access open. CrowdSec says his laptop was compromised in May's supply chain a
These 3 Agentic AI Stocks Have More Than Hype Behind Their Growth Stories
Key Points Interested in ServiceNow, Inc.? Here are five stocks we like better. Agentic AI has become one of the market's fastest-moving themes, making it harder to separate genuin