What is Microsoft Sentinel and how does it fit into the role of a Security Operations Analyst?

Discover what a VPN is, how it works, and whether you actually need one in 2025.

If you’ve been shopping for AI-powered SOC platforms lately, you’re probably hearing the same promises: “Cut alert fatigue,” “Boost…

From billboards to boardroom decisions, AI is everywhere — but without governance and guardrails, most initiatives wouldn’t be able to…

Why Red Teamers Still Struggle with Tactical Decision-Making — and What Needs to Change Before AI Can Actually Help.

The CTI Dispatch is a weekly threat intelligence summary that highlights critical events, attacker behavior, and defender takeaways.

Task 1: Introduction

Nimhawk, an advanced Nim-based C2 framework built on NimPlant, offers modularity, enhanced evasion, a new GUI, and robust features for red team operations.

Cybereason exposes a deceptive malware campaign using compromised WordPress sites and the "ClickFix" technique to deliver weaponized NetSupport Manager RAT clients for remote access.

Trend Micro uncovers BERT ransomware (Water Pombero) deploying multi-threaded variants against Windows, Linux, and ESXi systems, showing code similarities to REvil's Linux variant.

Splunk exposes a campaign weaponizing Inno Setup installers to deploy RedLine Stealer, using obfuscated Pascal scripts and HijackLoader to steal browser/crypto data.

CERT@VDE warns of critical OS command injection flaws (CVE-2025-3626, CVE-2025-3705) in Frauscher railway systems, allowing remote admin compromise or physical attack via USB.

FortiGuard Labs exposes NordDragonScan, a new infostealer using weaponized HTA scripts in Ukrainian-themed phishing. It performs recon, steals browser profiles, and exfiltrates documents.

A phishing campaign impersonates HunCERT & WeTransfer, using LogoKit on AWS S3 with Cloudflare Turnstile to steal credentials. The active domain has zero VirusTotal detections.

XMRig cryptojacking is surging, leveraging LOLBAS techniques, PowerShell, and Scheduled Tasks to mine Monero undetected, with a 45% rally in XMR price driving the attacks.

JPCERT/CC warns of critical flaws in Nimesa Backup and Recovery (CVE-2025-48501, CVSS 9.8 RCE; CVE-2025-53473 SSRF). Unsupported versions pose severe risk to AWS data.

ASEC uncovers XwormRAT delivered via phishing emails using steganography, hiding sophisticated .NET malware within JPG images for stealthy execution and full system control.

A critical flaw (CVE-2025-41672, CVSS 10.0) in WAGO Device Sphere allows unauthenticated attackers full admin control via shared default JWT certificates. Update to v1.0.1 immediately!

Hey there, digital explorer! 🚀

Domina el Broken Access Control: Hacking, Bug Bounty y Prevención. Descubre cómo se explotan las fallas de acceso y cómo proteger tus sistem

Hey there, how’s it going :D (you can reply in comments).