2025–10–21 * SMB Journal

While this question begs for context, sometimes the answer is simple, two firewalls. This is the problem I faced while creating…

Antivirus, firewalls and paranoia aren’t enough to protect you from software supply chain attacks.

Your business network is the backbone of your daily operations — but it’s also a target for cyberattacks, data theft, and hidden…

Ransomware is evolving; it’s no longer limited to encrypting files on disk. A growing trend shows attackers targeting databases directly…

Hi friends! Nomad here. I want to document what I know so far about the deactivation and subsequent reactivation of my main account…

first, let me explain what Cyber security means, Cyber is a culture of computers, networks and anything that has to do with the internet…

Today’s class opened my eyes to the invisible wars happening behind our screens.

What if your DevSecOps pipeline could detect threats, adapt, and heal itself — just like the human immune system?

Scamming Awareness Tips Safeguarding Yourself from Fraud In an age where technology facilitates communication and commerce, scams are increasingly prevalent and sophisticated. Understanding how to …

Have You Been Searching: “How to Withdraw Crypto from Bitunix?” Here’s the Real Answer.

Have You Been Searching: “How to Withdraw Crypto from Bitunix?” Here’s the Real Answer.

OpenAI launches ChatGPT Atlas, a new AI-powered browser with a built-in chatbot that automatically understands web content, challenging Google's dominance.

Google issued an urgent Stable Channel update for Chrome (v141.0.7390.122) to fix a High-severity V8 flaw (CVE-2025-12036) that could lead to Remote Code Execution via a malicious web page.

Google exposed pro-Russia IO campaigns (Portal Kombat, Doppelganger) exploiting a Polish drone incursion to deflect blame from Russia, undermine NATO, and discredit the Polish government.

Sauter patched six flaws in modulo 6 devices. The Critical CVE-2025-41723 (CVSS 9.8) flaw allows unauthenticated file upload via the SOAP interface, risking RCE. Update to v3.2.0.

Kaspersky exposed the resurfaced PassiveNeuron campaign targeting Asia via MS SQL servers. The APT deploys custom Neursite and NeuralExecutor backdoors using Phantom DLL Hijacking for stealth persistence.

Unit 42 exposed Scattered LAPSUS$ Hunters pivoting to Extortion-as-a-Service (EaaS) after Salesforce leaks. The group is recruiting insiders and teasing SHINYSP1D3R ransomware on Telegram.

ABB disclosed a Critical (CVSS 9.9) Missing Auth flaw (CVE-2025-9574) in EoL ALS-mini-S4/S8 load controllers, allowing unauthenticated remote config access. No patch will be released.

Qianxin exposed Bitter APT using a WinRAR path traversal flaw and malicious Office macros to deploy a C# backdoor against military/FinTech targets in Asia. The attack sets up scheduled persistence.

Google exposed Russia's COLDRIVER APT deploying a new "ROBOT" malware family (NOROBOT, YESROBOT) just 5 days after its LOSTKEYS tool was disclosed. The multi-stage malware uses a ClickFix lure.