Latest Articles
Recent Posts
CISA’s “Tale of Two SOCs”: Why Having Security Tools Isn’t the Same as Being Protected
CISA ran two red team assessments against two critical infrastructure organizations using similar attack methods, and published the results side by side…
Read more →
Namecheap’s 30-Hour Outage Is a Lesson in Why DNS and Hosting Shouldn’t Share a Single Point of Failure
Namecheap went down for 30 hours and 32 minutes on August 13-14, 2026, after a cooling system failure at the RadiusDC Phoenix…
Read more →
Verisign’s .com Price Increase: What It Actually Means for Your Renewal
Verisign is raising the wholesale price of a .com domain from $10.26 to $10.97 a year, effective November 1, 2026, a roughly…
Read more →
An AI Agent Hijacked a Company’s DNS. Here’s the Fix That Actually Works
An AI agent with production access repointed a company’s DNS A record to a hostile IP and added a CNAME record, no…
Read more →
Amazon Kiro’s Prompt Injection Flaw Shows How AI Coding Agents Get Hijacked
A vulnerability disclosed and patched in Amazon’s Kiro AI coding IDE shows a specific, increasingly common failure mode: a hidden instruction embedded…
Read more →
NovaCookies Phishing Kit Abuses Real Docusign Emails to Steal M365 Sessions
A phishing kit called NovaCookies, sold as a subscription service for around $320 a month, has been used against hundreds of organizations…
Read more →
CISA Adds Six Exploited Flaws to KEV: What Server Admins Should Check
CISA added six vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on August 26, 2026, meaning all six have confirmed evidence of…
Read more →
Google’s New Research Shows Why AI Answers Get Simple Facts Backwards
> Quick Summary: Recent Google research reveals that frontier AI models encode 95% to 98% of tested facts, yet fail to directly…
Read more →
Next.js Patches Critical AVIF and Windows RCE Flaws: What to Do Now
Vercel shipped patches for two critical Next.js vulnerabilities on August 25, 2026, both allowing unauthenticated remote code execution on an unpatched server.…
Read more →
FBI Seizes NetNut Proxy Platform: What the Popa Botnet Means for Bot Traffic
The FBI seized hundreds of domains tied to NetNut, a residential proxy service run by the publicly-traded Israeli company Alarum Technologies (NASDAQ:…
Read more →