Blog
-
Vulnerability Exploitation Surges Ahead as Leading Breach Cause in New Verizon DBIR
Verizon’s Data Breach Investigations Report (DBIR) for 2026 has been released, and the single most interesting piece of information is the new prevalence of attackers leading with vulnerability exploitation. This is the first time in 19 years that credential abuse has not been the leading initial breach cause.
-
Critical Vulnerability in NGINX Found After 18 Years Shows AI’s Growing Impact
NGINX has been available since 2004 and the critical vulnerability that was uncovered is thought to have been present since 2008. The open source web server is a very popular tool for load balancing and serving static content, with estimates putting almost a third of the world’s most popular websites down as users.
-
US Government May Require Civilian Agencies to Address Critical Vulnerabilities Within Three Days; Are They Prepared?
While there is no official word as of yet and a decision has reportedly not been reached, inside sources at CISA say that high-level discussions about setting the time limit for remediating known critical vulnerabilities (KEVs) to just three days are taking place.
-
AI Agent Security Called Into Question Once Again After Claude Source Code Leak
The level of trust that one can give to AI agents is once again in question, with recent news that Anthropic managed to include Claude Code source code in a software update for the world to see.
-
When Will “Q-Day” Happen, Really? Google Says Be Ready With Encryption Transition by 2029
Google warns organizations should expect that, at minimum, threat actors that have already stolen encrypted materials will potentially be able to start cracking them with quantum computing techniques by 2029 in what will likely be the opening chapter of Q-Day.
-
Fitness App Activity Exposes Location of French Aircraft Carrier En Route to the Middle East
Strava fitness app is once again in the news as a French officer seems to have obliviously used it during a run on the deck of France’s only aircraft carrier, giving away its position.
-
Foreign Internet Routers Restricted in US Over National Security Interests
Foreign-made consumer-grade internet routers are now blocked from sale in the US by default, and will need to undergo a special approval process that comes with a thumbs-up from the DoW or DHS. While the ban applies globally, the main national security rationale is to reduce dependency on equipment coming from China.
-
New Attack Chain Targeting Claude Involves “Invisible Prompt” Vulnerability
The attack chain relies on three specific vulnerability elements: an open redirect from the main Claude website that makes a malicious URL look like a legitimate link to the AI, a prompt injection in the attack URL that is not visible to the end user, and a means by which to exfiltrate requested data via…
-
iOS Exploit Chain Used by Hackers in Infostealer Attacks Since November 2025
Highly active threat actor making use of a new infostealer called DarkSword that incorporates zero-day vulnerabilities. The malware is an iOS exploit chain that is initiated simply by visiting an attack page with Safari.
-
Safety of All Social Security Data in Question After DOGE Whistleblower Complaint
The whistleblower claims that Solly’s plan for the alleged purloined social security data was to turn it over to his new employer, Fortune 500 firm Leidos. The anonymous source alleges that Solly copied the data in question from a thumb drive to a personal computer, then asked them about “sanitizing” it ahead of a planned…