A new campaign by Chinese threat actor UNC5174 uses the VShell RAT. Sysdig TRT reports on the group's shift to open-source tools and evasion tactics.

Kandji's research uncovers PasivRobber, a sophisticated macOS malware suite targeting user data. Learn about its deceptive tactics and capabilities.

A malicious npm package, disguised as an Advcash integration, contains a reverse shell that triggers after successful payments, granting attackers server access.

CloudSEK's report reveals how fake PDF converters use social engineering to spread malware. Learn how these malicious sites deceive users and steal data

iFAX Solutions discloses a critical remote code execution vulnerability (CVE-2025-1782) affecting HylaFAX and AvantFAX due to improper sanitization

Trend Micro uncovers BPFDoor backdoor used in cyberespionage across Asia and the Middle East, attributing it to the Red Menshen APT group

NVISO's report details BRICKSTORM, a China-linked backdoor targeting European industries, using sophisticated techniques to evade detection

🔍 Scenario

A tool that saves a lot of time in your cybersecurity journey

Once upon a time I was an Esthetician, with two awesome businesses. Than some asshole came along hacked me and took everything. One year…

Cybercrime is rising in 2025, but underreporting and fragmented data hide the true impact. Learn the latest trends and how better metrics…

As a former intelligence officer, I thought I knew everything about security. My job was all about protecting classified information, so…

A Deep Technical Comparison of Six Leading SIEM Platforms for Detection, Investigation, and Response at Enterprise Scale

Objective

Introduction

Fui aprovado na certificação SC-900 — Microsoft Certified: Security, Compliance, and Identity Fundamentals!

Mexican cartels, historically recognized for trafficking and violent crime, have integrated advanced cybersecurity tools and TTPs into their operations. This shift is substantiated by open-source…

OpenAI is reportedly developing a social network, potentially integrating ChatGPT. Learn about their plans, and the Altman/Musk rivalry behind it.

VSCode extension errors in Cursor? Learn why Microsoft's licensing restricts C/C++ & Remote SSH in non-Microsoft editors. Discover open-source alternatives

​​Hello everyone, I’m Invik.​​ By profession, I’m a software development engineer, but in my free time, I do some security research and…

With the world becoming increasingly interconnected, cybersecurity has emerged as one of the most critical domains of our time. From…