CVE-2025-32433 in Erlang/OTP SSH server enables unauthenticated RCE. Patch now to prevent full system compromise across all affected versions.

Threat actors abuse Node.js in malvertising campaigns to steal data and deliver malware via fake crypto installers and stealthy PowerShell scripts.

Malvertising campaign targets Onfido users via deceptive Google ads, using Evilginx to steal credentials.

New attack campaign uses Microsoft Teams phishing and a novel TypeLib COM hijacking technique for persistence, targeting finance sector.

Cyberattacks are surging against the energy sector, driven by geopolitical tensions. Ransomware, espionage, and supply chain attacks pose major threats.

Cisco patches CVE-2025-20236, an RCE flaw in Webex App exploitable via crafted links. Users urged to update to avoid command execution risks.

APT29, a Russia-linked group, targets European diplomats with phishing emails disguised as wine tasting invitations, deploying GRAPELOADER malware

CISA issues urgent alert on actively exploited SonicWall SMA100 vulnerability (CVE-2021-20035). Federal agencies must mitigate by May 7, 2025

Unprotected APIs exposed sensitive data of over 33,000 employees. CloudSEK's BeVigil discovered the security flaw

LummaStealer evolves into a sophisticated Malware-as-a-Service, using stealth and advanced techniques to steal data.

CrazyHunter ransomware group targets Taiwan's critical infrastructure with sophisticated attacks, using BYOVD techniques and open-source tools.

Very helpful in your Osint investigation time

Smart home technology offers incredible convenience, automating our lives in ways that feel futuristic and effortless. However, lurking…

In our digital world, data is constantly moving between devices, across networks, and through the cloud. But how do we ensure that this…

A Technical and Ethical Journey

The integration of AI in cybercriminal operations remains incremental rather than transformative.

Maintaining data integrity is crucial in today’s digitally-driven world. The importance of email verification cannot be overstated when it comes to safeguarding your data. Let’s embark on this…

“That email looked real. The name was right. The tone felt familiar. So… I clicked.”  — Everyone, just before a cybersecurity incident

Having received Microsoft’s SC-900 Security, Compliance, and Identity Fundamentals certification this previous weekend, I wanted to take a…

After 2 Months of Hardcore Upgrades — V4 Is Here & Free to Try!