Blog
Notes from the work.
Writing from the Yaamlabs engineers on how we test, what we find, and how it gets fixed.
September 25, 2026, 3 min read, Patching, Vulnerabilities, Windows
September's Patch Tuesday was the largest on record, with two exploited zero-days and 20 wormable flaws. A four-tier order for getting through it.
September 25, 2026, 4 min read, Identity, Phishing, Threat intel
Microsoft took down EvilTokens, a phishing service that hit 12,000+ inboxes by abusing the device code sign-in flow. How it worked and how to shut the door.
September 25, 2026, 5 min read, Vulnerabilities, Threat intel, Patching
Adobe Commerce, WSO2 and Check Point flaws rated 9.8 to 10.0 are under active attack. What each one does, what attackers are doing with it and how to fix it.
September 25, 2026, 3 min read, Ransomware, Threat intel, Resilience
A new ransomware group, n0n, tells victims it will wipe their backups if they do not pay. How its attacks run and how to keep backups out of reach.
Follow new posts with the RSS feed.
Tell us about the system in the chat or on the contact page. Yaali, our AI agent, answers first and brings in an engineer.