Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
NZ data centres at risk as firms lag on resilience
A Datacom survey of 155 NZ leaders found 85% acknowledge data centre risks, yet many organizations are still catching up on resilience measures.
Run Firefox in Rootless Podman for Security Isolation
A guide explains running Firefox in a rootless Podman container to isolate the browser from the host system, reducing security risks.
Trump Plan Taps US Firms to Fight Foreign Cybercrime
The U.S. government plans to enlist American companies in combating foreign cybercrime, shifting focus from individual defense to proactive measures.
InfraGuard v0.4.3: Red Team C2 Redirector
InfraGuard v0.4.3 is a red team infrastructure tracker and C2 redirector, offering a modern alternative to RedWarden.
Synology Hit by .hrr Ransomware with READ_ME_UNLOCK_FILES
A ransomware incident on Synology devices uses the .hrr extension and a READ_ME_UNLOCK_FILES.txt note. Investigation is ongoing.
winauthlib: Windows Authentication Library Tool
winauthlib is a Windows authentication library for security testing, available on Kitploit. It helps analyze authentication mechanisms.
CS_SleepMask: New Cobalt Strike Sleep Mask Kit
CS_SleepMask is a tool that modifies Cobalt Strike's sleep mask to evade detection. It helps attackers hide beacon activity from security tools.
Subdomain TKO Tool Released on Kitploit
Kitploit features Subdomain TKO, a tool for detecting subdomain takeover vulnerabilities. It helps security analysts identify and mitigate risks.
TikTok to Pay $400M in Child Privacy Settlement
TikTok agreed to a $400 million settlement over U.S. child privacy violations, paying $300 million now and $100 million later.
Synology DS1618+ Hit by Ransomware, .hrr Files
A Synology DS1618+ NAS was attacked by ransomware on August 20, 2026, encrypting files with .hrr extension. User seeks identification and help.
GTA 6 hacker CyberLeek goes offline amid legal crackdown
CyberLeek's website mirror is down and its Telegram channel was removed as Take-Two and Microsoft pursue legal action.
AttackGen v0.16.0 Released for IR Testing
AttackGen v0.16.0, an open-source tool, uses LLMs and MITRE ATT&CK to generate tailored incident response scenarios based on selected threat actor gro