Blog & Resources

Security awareness tips, phishing prevention guides, and best practices.

Malware

Cryptomining malware that locates its control server in a GitHub poem has hit more than 3,400 servers, researchers say

Over 3,400 “victim servers” were hit by cryptomining malware PoeLLM during a campaign named Canto Incognito, tracked since April 2026, Lumen’s cybersecurity research team Black Lotus Labs reports

1 min read 2 views Oct 11
Other

I built a security setup that costs nothing and blocks more threats than most paid services

Staying safe online can feel overwhelming, especially when every other security tool seems to come with a subscription. But do I really need to spend a fortune to protect my digital life? Not necessa

1 min read 3 views Oct 11
Other

The English National Ballet Has To Email Out ‘Whoops, Our Supply Chain Was Compromised’ To Its Fans

The organisation, which is based in east London, said in an email to those affected that it found out about the hack when it changed its customer relations service and the new provider Beacon CRM "ex

1 min read 6 views Oct 11
Other

Mint Explainer | What a green card freeze means for H-1B workers

The suspension of green card processing for Microsoft, Adobe, Infosys, TCS, Wipro, HCLTech, Cognizant and Capgemini may complicate talent retention and hiring. Companies could rely more on temporary visas, US-based hiring and offshore delivery while investiga

1 min read 1 views Oct 11
Phishing

Coldcard investigates phishing link posted on its X account after exploit

The incident underscores the critical need for vigilance against phishing threats and highlights potential vulnerabilities in social media security.

1 min read 2 views Oct 11
Other

How to watch the Eagles vs. Jaguars: Channel, live streams, odds, and venue for the international NFL game

The short version: Fans can live stream the Eagles vs. Jaguars game on the NFL Network via Fubo in the US, for free on Channel 5 in the UK, and through the DAZN NFL Game Pass in most other regions. V

1 min read 1 views Oct 11
Other

From Engaged to Destructive Exceptionalism: The United States and the ICC

[Brianne McGonigle Leyh is Professor of Global Justice Studies at Utrecht University’s School of Law and leads the university’s Global Justice Investigations Lab. She co-directs the Netherlands Institute of Human Rights (SIM), is a member of the Montaigne Cen

1 min read 1 views Oct 11
Malware

Nippon Columbia malware incident exposes 8.6 million karaoke fan records

Daiichi Kosho, a major Japanese entertainment system maker, disclosed that a malware infection at its contractor, Nippon Columbia, exposed more than 8.7 million customer and employee records.

3 min read 2 views Oct 11
Phishing

Coldcard says it’s investigating how phishing link appeared on its X account

Bitcoin-only hardware wallet Coldcard said a phishing link appeared Sunday on its official X account, for which it has used offline two-factor authentication and tightly restricted access since 2017.

1 min read 2 views Oct 11
AI Security

Super Micro contractor pleads guilty in scheme to divert AI servers with Nvidia chips to China

In March, US prosecutors charged Ting-Wei "Willy" Sun and two others associated with Super Micro, including a co-founder, with conspiring to divert about $2.5 billion worth of US AI technology to China in violation of export laws.

1 min read 3 views Oct 11
Vulnerabilities

SonicWall SMA 1000’s Latest SSRF Door Was Being Walked Through Within 24 Hours of Disclosure

On October 6, SonicWall issued advisory SNWLID-2026-0017. The bulletin stated plainly: “There is currently no evidence any of the vulnerabilities addressed in this release are being exploited in the wild.” Within 24 hours, the Previdian honeypot network detec

1 min read 3 views Oct 11
Vulnerabilities

U.S. CISA adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the followin

1 min read 3 views Oct 11

Want to learn more?

Start your free trial and see Phishlens in action.