Yaamlabs
Blog

Notes from the work.

Writing from the Yaamlabs engineers on how we test, what we find, and how it gets fixed.

974 fixes in one Patch Tuesday: what to patch first

September 25, 2026, 3 min read, Patching, Vulnerabilities, Windows

September's Patch Tuesday was the largest on record, with two exploited zero-days and 20 wormable flaws. A four-tier order for getting through it.

EvilTokens: how device code phishing beat MFA

September 25, 2026, 4 min read, Identity, Phishing, Threat intel

Microsoft took down EvilTokens, a phishing service that hit 12,000+ inboxes by abusing the device code sign-in flow. How it worked and how to shut the door.

Four exploited flaws to patch before the weekend

September 25, 2026, 5 min read, Vulnerabilities, Threat intel, Patching

Adobe Commerce, WSO2 and Check Point flaws rated 9.8 to 10.0 are under active attack. What each one does, what attackers are doing with it and how to fix it.

n0n ransomware threatens to destroy your backups

September 25, 2026, 3 min read, Ransomware, Threat intel, Resilience

A new ransomware group, n0n, tells victims it will wipe their backups if they do not pay. How its attacks run and how to keep backups out of reach.

Follow new posts with the RSS feed.

Tell us about the system in the chat or on the contact page. Yaali, our AI agent, answers first and brings in an engineer.