One Crafted Email Could Give Attackers Root on the Appliance That Screens Email
Cisco confirmed that attackers are exploiting a flaw in its Secure Email Gateway. A crafted email containing malicious SQL statements can be enough to run commands as...
Criminals Turned a Remote-Support Tool Into a Worm. Here Is the One Question to Ask Your IT Provider.
ScreenConnect is the remote-support tool many IT providers use to fix your computer from afar. Since late August, attackers have been tricking people into installing a...
HBO Max's Reddit Account Was Hijacked to Push Malware. The Victims Installed It Themselves.
For about 48 hours, HBO Max's verified Reddit account ran 108 ads for apps that do not exist. Anyone who clicked was told to paste one command into Terminal or...
Revolut Handed Customer Passports to a Fake Government Request. The Email Was Real.
Revolut confirmed it disclosed customer passports, selfies, and full transaction histories to an unauthorized third party. The requests came from a legitimate government...
Attackers Are Now Running AI at Machine Scale. Small and Medium Businesses Are in the Blast Radius.
Two research reports in one week describe attackers running fleets of AI agents: one crew scanned 1.8 million Android apps for hardcoded secrets and pulled 2,100 Azure...
Criminals Can Open AI Accounts Without a Password. MFA Doesn't See It Happen.
Okta researchers dug through a leaked trove from 5,871 infected computers and found live session tokens and API keys for AI services, replayable by attackers with the...
This Phishing Kit Waits for You to Finish MFA. Then It Walks In.
Researchers are tracking a live phishing operation aimed exclusively at Microsoft 365: the victim logs into the real Microsoft page, approves real MFA, and the attacker...
Hackers Do Their Best Work on Long Weekends. This One Starts Tonight.
The FBI and CISA wrote an advisory about it, the 2025 data confirms it, and last Labor Day weekend a carmaker lived it: attackers favor holidays and weekends, when...
The Newest Way In Is a Phone Call. Baxter Is Just the Latest Name.
The most effective way into a company right now is not a piece of malware. It is a phone call to a person, made by someone who did their homework. Here is how the attack...
Your Newest Employee Is an AI Agent Nobody Hired
AI stopped just answering questions. Agents now act inside business systems, creating, changing, and deleting, and most companies have no record of any of it.
The Most Common AI Incident Is Not a Hack
No attacker, no malware, no breach in the classic sense. Just work moving faster than the guardrails. What actually leaks through AI prompts, and what to do.
Shadow AI Statistics 2026: What Small and Medium Businesses Need to Know
Employee use of unapproved AI tools tripled in a year. Here are the 2026 shadow AI numbers, from Verizon, IBM, and others, that every business owner should see.
Ready when you are. Start with a free assessment.
Email, endpoints or AI use: one call, 15 minutes, no slides. Or send the quote you already hold and we beat it.