THREAT WATCH
High Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD): CVE-2026-20349 — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability High Microsoft Windows Ancillary Function Driver for WinSock: CVE-2026-68820 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability Critical Metabase CVE-2026-72898 — Metabase SQL Injection Vulnerability Critical Progress LoadMaster: CVE-2026-8037 — Progress LoadMaster Command Injection Vulnerability Critical JetBrains TeamCity: CVE-2026-63077 — JetBrains TeamCity Deserialization of Untrusted Data Vulnerability Critical IBM Langflow: CVE-2026-9198 — IBM Langflow Code Injection Vulnerability High Apache Tomcat: CVE-2026-34486 — Apache Tomcat Missing Encryption of Sensitive Data Vulnerability High N-able N-central: CVE-2026-18556 — N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability High Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD): CVE-2026-20349 — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability High Microsoft Windows Ancillary Function Driver for WinSock: CVE-2026-68820 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability Critical Metabase CVE-2026-72898 — Metabase SQL Injection Vulnerability Critical Progress LoadMaster: CVE-2026-8037 — Progress LoadMaster Command Injection Vulnerability Critical JetBrains TeamCity: CVE-2026-63077 — JetBrains TeamCity Deserialization of Untrusted Data Vulnerability Critical IBM Langflow: CVE-2026-9198 — IBM Langflow Code Injection Vulnerability High Apache Tomcat: CVE-2026-34486 — Apache Tomcat Missing Encryption of Sensitive Data Vulnerability High N-able N-central: CVE-2026-18556 — N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

Start Learning →

Explore Resources →

Practical knowledge, proven frameworks, and actionable resources to understand cybersecurity, reduce risks, and build a stronger digital future.

Helping People and
Businesses Stay Secure
in a
Digital World.

PRACTICAL KNOWLEDGE. PROVEN SECURITY.

Cyber Awareness

Educate. Empower. Stay Safe.

Threat Intelligence

Real Threats. Clear Insights.

Knowledge for All

Accessible. Actionable. Reliable.

Powerful tools for your cyber journey

Free tools to test, protect and improve your security.

Password GeneratorGenerate strong, unique passwords.Runs in your browserTry now Password AnalyzerCheck how strong your password is.Runs in your browserTry now Password Breach CheckCheck if your password has appeared in known breaches.Runs in your browserTry now Password Policy CheckerCheck your password against a policy.Runs in your browserTry now
View all tools

Latest Articles

Securing your home Wi-Fi in 15 minutes
Aug 10, 2026 Network Security / encryption / firmware 6 min read
Key takeaways Your router is the one device every other device on your network depends on, and it is usually the one nobody has touched since it was installed. The two changes that matter most are the router's own admin password and keeping its software updated. Both take about three minutes. If your router is old enough that…
Cloud security for decision-makers
Aug 9, 2026 Cloud Security / access-control / business-continuity 8 min read
Key takeaways Moving to the cloud transfers some responsibilities to your provider and none of the ones that cause most breaches. Your data, your access rights, your configuration and your monitoring stay yours at every service level. IBM puts the global average cost of a breach at US$4.99 million in 2026, a record and a 12 percent rise…
What a VPN actually does, and whether you need one
Aug 9, 2026 Network Security / browser-security / network-security 8 min read
Key takeaways A VPN does not make you invisible. It moves who is able to watch your browsing from your internet provider to a VPN company. The classic reason to buy one, protecting yourself on cafe Wi-Fi, has largely been solved by your browser. Almost all web traffic is now encrypted by default. Google is making Chrome ask…
SPF, DKIM and DMARC in practice
Aug 8, 2026 Email Security / dkim / dmarc 11 min read
Key takeaways SPF and DKIM each validate a domain, but neither looks at the address your recipient actually sees. DMARC exists to connect them to that address, and that connection is called alignment. The DMARC specification was rewritten in May 2026. RFC 9989 replaces RFC 7489, and DMARC is now an IETF Standards Track protocol rather than an…
Ransomware: a business leader’s risk brief
Aug 8, 2026 Malware / management / mfa 9 min read
Key takeaways The ransom is the smaller number. Recovery now costs an average of US$1.7 million per incident before any ransom is counted, and that figure rose 11 percent in a year even as ransom demands fell. The entry point has moved. For the first time in four years, exploited vulnerabilities are not the leading root cause. Email,…
Reading a CVE: CVSS, EPSS and KEV explained
Jul 29, 2026 Vulnerability Management / bod-26-04 / cisa-kev 10 min read
Key takeaways A CVE record is an identifier and a description. It is not, on its own, a judgement about how urgent the vulnerability is for you. CVSS answers how bad exploitation would be, EPSS answers how likely exploitation is in the next 30 days, and CISA's KEV catalog answers whether exploitation has actually been observed. Since 15…
MFA for Business Leaders: What You Need to Know
Jul 27, 2026 Identity & Access Management / mfa / passwords 6 min read
Key takeaways MFA is the single highest-value security control most businesses can deploy, and it is usually low-cost or free. Microsoft reports it blocks more than 99% of automated account-compromise attacks, the kind that make up the vast majority of what hits your business daily. Not all MFA is equal. SMS codes are the weakest form and are…
HackOnChat WhatsApp Scam: How to Protect Your Account from Hijackers
Nov 20, 2025 Digital Privacy / mfa / phishing 4 min read
Key takeaways: HackOnChat is a global scam, uncovered by security firm CTM360, that hijacks WhatsApp accounts using fake login pages. It works two ways: hijacking your WhatsApp Web session, or tricking you into handing over a verification code. The scam spreads through trust. Once an account is taken over, it messages that person's contacts asking for money or…
How to Spot a Phishing Email in 30 Seconds
Nov 18, 2025 Email Security / phishing 4 min read
Key takeaways: Most phishing emails can be spotted in under a minute with a few quick checks. The strongest signals are the real sender address, hidden link destinations, and pressure to act fast. Hover over links to see where they really go, and never open unexpected attachments. Polished writing no longer proves an email is safe, so judge…
October is National Cybersecurity Awareness Month: Stay Safe Online!
Oct 1, 2025 Governance, Risk & Compliance / mfa / passwords 5 min read
Key takeaways: Every October, Cybersecurity Awareness Month is a reminder to check your online habits and tighten them. You are not too small to be a target. Everyday users and small businesses are hit just as often as large ones. Four habits cover most of the risk: strong unique passwords, multi-factor authentication, phishing awareness, and keeping software updated.…
The Power of Strong, Unique Passwords — Your Digital Fortress
Sep 17, 2025 Identity & Access Management / mfa / passwords 5 min read
Key takeaways: Your password is the first line of defence for almost everything you do online, more important than any software. The biggest risk is reuse. If one site is breached, attackers try that same password everywhere else you use it. Length beats complexity. A long passphrase made of several random, unrelated words is both stronger and easier…
Cybersecurity Isn’t Just for Techies: Why It Matters to Everyone
Sep 12, 2025 Digital Privacy / mfa / passwords 5 min read
Key takeaways: Cybersecurity isn't only for IT teams. If you use email, online banking, or social media, you are already part of it. Most online harm starts with an ordinary, avoidable mistake, like a reused password or a convincing scam message. You are not too small to be a target. Most attacks are automated and simply look for…
View all

Top Stories This Week

All
Threat Intelligence

Threat Intelligence Center

View full dashboard
High 11 Aug

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)

no forecast
8.6CVSS
High 11 Aug

Microsoft Windows Ancillary Function Driver for WinSock

Use After Free

no forecast
7CVSS
Critical 11 Aug

Metabase

SQL Injection

1% likely
10CVSS
Critical 7 Aug

Progress LoadMaster

Command Injection

99% likely
9.6CVSS
Critical 5 Aug

JetBrains TeamCity

Deserialization of Untrusted Data

11% likely
9.8CVSS
Critical 4 Aug

IBM Langflow

Code Injection

17% likely
9.8CVSS