Practical tips, use cases, and news about AI for SMBs. Explore our latest articles.
CVE-2026-124194: opening a malicious Outlook file silently leaks a user's NTLMv2 hash to an attacker, no warning, no click required.
CVE-2026-88779 hits NetScaler ADC and Gateway at the SAML layer, exposing the blind spot in most data governance programs: federated authentication.
Hardcoded static credentials in Cisco FMC expose entire network architectures, and the vulnerability has been actively exploited since July 2026.
PamStealer reveals how macOS infostealers have reached a new technical maturity, forcing IT and security teams to rethink their endpoint strategy.
FortiBleed compromised over 30,000 Fortinet devices across 194 countries, no zero-days needed, just credentials left unchanged after a prior breach.
CVE-2026-20253 (CVSS 9.8): an unauthenticated component in Splunk Enterprise exposes AWS deployments to remote code execution, no credentials required.
Fewer than twenty encrypted vaults stolen via TOTP brute-force: the Dashlane incident exposes the transparency gaps security vendors too often hide.
