Stay informed with our latest blog posts.
Two critical unauthenticated RCE flaws in PHP core, dubbed PHP2Shell, leaked a day early. What happened, why EOL PHP 5 and 7 installs are the real problem, and what to do now.
Read more: Another Day, Another Core RCE: Welcome to PHP2Shell (CVE-2026-109618 & CVE-2026-109619)
Attackers took over Danfoss refrigeration controllers in hundreds of French supermarkets and heated fridges to 50°C. What failed, which models are affected and how to protect them.
Read more: French Supermarket Fridge Hack: What Happened and How to Prevent It
Police in Japan say a couple hid a mini PC behind a hotel fridge and used the hotel Wi-Fi to send 480,000 credit card phishing emails. How the scheme worked and what it teaches.
Read more: Hidden PC in a Kobe Hotel Sent 480,000 Phishing Emails
Tampered Ledger devices sold through third-party resellers carried a hidden cellular implant that sent seed phrases to attackers. Over $100 million was drained. How to check yours.
Read more: Tampered Ledger Wallets: How the Hidden Implant Steals Seed Phrases
ASCII smuggling hides invisible Unicode tag characters inside words so email filters miss them while people read normal text. How the attack works and how to stop it.
Read more: ASCII Smuggling: How Invisible Unicode Bypasses Email Filters
In September, a threat actor claimed to have access to 38 million records from Argentina's SIPA pension system. ANSES denies a hack. Here's what we know and how the leaked data fuels phishing.
Read more: Argentina SIPA Data Leak Claim: The Phishing Risk Explained
A data breach is often the reconnaissance phase for targeted phishing. How attackers turn leaked personal data into convincing lures, and how to stop the second wave.
Read more: Data Breaches and Spear Phishing: The Second Wave Explained
UAC-0099 is hijacking trusted apps like Notepad++ and WinRAR through malicious plugins and DLL sideloading. Here's the full infection chain, based on CERT-UA's technical advisory.
Read more: UAC-0099 Weaponizes Notepad++ and WinRAR Plugins to Deliver Malware
Days after the Coldcard entropy vulnerability went public, a phishing campaign impersonating Coinkite began tricking users into installing remote access malware disguised as a hardware audit tool.
Read more: From Exploit to Phishing: How Attackers Weaponized the Coldcard Entropy Incident
Gift card and crypto scams work because attackers borrow someone else's identity: a celebrity, an investment manager, even a loved one's voice. Here's how the impersonation angle actually plays out.
Read more: How Impersonation Fuels Gift Card and Crypto Scams
A malicious Google Ad leads to a real chatgpt.com link, where a fake "Codex" install command hides a base64 payload that drops the MacSync infostealer. Here's the full chain.
Read more: How a Real ChatGPT Link Delivers Phishing via a Fake Codex Install
Scam-style extortion is rising: attackers post fake data breach claims on leak sites with no real intrusion. Here's how the bluff works and how to verify before you panic.
Read more: Fake Data Breach Claims: Why Scam-Style Extortion Is Surging in 2026
The Vatican's Click to Pray app leaked the personal data of 700,000 users for over six months through a basic IDOR flaw. Here's how sequential user IDs and zero auth checks did the damage.
Read more: Click to Pray Exposes 700k Users: Inside a Textbook IDOR Failure