eSentire exposed a surge in NetSupport RAT campaigns using the ClickFix social engineering tactic. Three threat clusters leverage a PowerShell loader to bypass AV and gain full remote access via the RMM tool.

Dell patched three flaws in Storage Manager, including a Critical (CVSS 9.8) Auth Bypass (CVE-2025-43995) that allows remote, unauthenticated access to the Data Collector’s APIProxy.war component.

Google exposed UNC6229, a Vietnam-based group running "Fake Career" phishing on job boards. They use fake lures to compromise digital advertising accounts and corporate credentials for profit.

Ubiquiti issued an urgent patch for a Critical Auth Bypass flaw in UniFi Access. Attackers with network access can fully take over door management systems.

Check Point exposed the YouTube Ghost Network, a coordinated op using 3,000+ videos (Game/Software Cracks) to spread Rhadamanthys/Lumma infostealers via fake engagement and external file hosts.

Unit 42 exposed the Smishing Triad, a PhaaS network that registered 194K+ malicious domains for global smishing. The group impersonates postal/banking services and uses Telegram for its underground market.

OpenWrt released v24.10.4 to fix two high-severity flaws: CVE-2025-62526 allows RCE via a heap buffer overflow in ubusd, and CVE-2025-62525 leaks kernel memory via a DSL driver.

Trend exposed "Premier Pass-as-a-Service," a model where Earth Estries (access broker) and Earth Naga (APT36) share compromised network access to deploy ShadowPad in a coordinated espionage campaign.

Netskope exposed a Python RAT (Nursultan Client) disguised as a Minecraft tool. It uses the Telegram Bot API for C2 to steal Discord tokens, credentials, and capture screenshots on Windows, Linux, and macOS.

HashiCorp patched two flaws in Vault: CVE-2025-11621 allows AWS Auth Bypass via IAM role collision, and CVE-2025-12044 allows unauthenticated JSON DoS attack.

First of all :السلام عليكم ورحمة الله وبركاته

Summary

To begin with, I will first explain how I will organize the write-ups for each tier of the “Starting Point” module on learning the basics…

AI models have become an integral part of our daily lives. Tools such as ChatGPT, Claude, Gemini, and Copilot, along with AI-powered…

In the role of a cybersecurity professional, especially as a SOC Analyst, Incident Responder, Threat Hunter, or DFIR specialist. I believe…

The term “game boosting” often brings mixed feelings — excitement for progress, but fear of bans or stolen accounts.
In 2025, that stigma…

Out of 65 threat intelligence articles published and processed last week, we’ve summarised 10 key ones for you, including IoCs.

What Are Plugins? An Analogy

Nothing to Something: Building My First Home Network While finishing my file storage server, I started a parallel project. Setting up my home network from scratch. The Plan I replaced my Xfinity …

TryHackMe room