A new report from Unit 42 reveals how cybercriminals are misusing generative AI to create realistic phishing sites, deepfake content, and fraudulent websites.

A new report reveals a North Korean espionage campaign targeting embassies with spear phishing and a sophisticated C2 channel hidden on GitHub.

Microsoft has exposed PipeMagic, a new backdoor disguised as a ChatGPT app. It was used with a zero-day exploit to gain SYSTEM privileges and deploy ransomware.

A new analysis details how the RansomEXX gang exploited a use-after-free zero-day (CVE-2025-29824) in the Windows Common Log File System to gain SYSTEM privileges.

The Noodlophile infostealer has evolved from fake AI platforms to spear phishing, using fake copyright notices and DLL side-loading to target companies.

A new report reveals a multi-stage cryptomining attack delivered via infected USB drives, a tactic that leverages DLL hijacking to bypass security.

Talk with me on linkedin

How to reason carefully about who attacked you, why it matters, and how to keep your own mind from getting in the way

Introduction

Penetration testing has evolved from a niche technical assessment into a critical cornerstone of modern cybersecurity strategies, playing…

The cybersecurity landscape is in constant flux, characterized by an accelerating arms race between malicious actors and defenders. As…

The landscape of cybersecurity threats is constantly evolving, demanding a corresponding advancement in defensive strategies. Penetration…

Modern network security is no longer a static defense but a dynamic, adaptive discipline crucial for organizational resilience. As cyber…

Modern network security transcends traditional perimeter defenses, navigating an increasingly intricate and expansive digital landscape…

The digital realm underpins nearly every facet of modern life, from global commerce to personal communication, making robust network…

You’ve just finished your dashboard. Clean UI, beautiful endpoints, everything works. Then — bam — you hit the wall. Not “who is the…

A critical vulnerability (CVE-2025-54336) in Plesk Obsidian could allow attackers to bypass the admin password and take complete control of affected servers.

Firefox is switching to CRLite for certificate revocation, a major change that improves security and privacy by eliminating the need for real-time OCSP queries.

Apple is reportedly manufacturing all four iPhone 17 models in India for the first time, marking a major shift in its strategy to reduce reliance on China.

Following U.S. intervention, the UK government has reportedly dropped its demand for Apple to install a backdoor in iCloud, which could restore Advanced Data Protection.

A new Windows update is causing major issues, including SSD lock-ups on some systems and broken reset/recovery options on all supported versions.