An anonymous cybersecurity researcher reported an unprotected database containing about 7,000 records linked to DomeWatch.us, the official…

Introduction

Due to work commitments, it’s been a while since I’ve engaged in detection engineering studies and training. Today, I’m attempting the…

In today’s complex digital landscape, cyber threats evolve faster than traditional defense mechanisms can adapt. Attackers now use…

I. Introduction

Photo by Markus Spiske on Unsplash

In today’s connected digital landscape, APIs play a vital role in enabling seamless data exchange between systems, applications, and users…

Critical unauthenticated RCE in Windows Server Update Services (WSUS) via unsafe deserialization of an AuthorizationCookie, enabling…

The SideWinder APT targeted embassies in South Asia, using malicious PDFs and legitimate-signed ClickOnce apps to deploy StealerBot malware.

The Brazilian Caminho malware uses LSB steganography to hide its .NET payload inside image files, running fully in memory to evade antivirus detection.

Coveware reports ransomware payment rates hit a historic low of 23% in Q3, while hackers pivot to insider bribery and targeted social engineering to maintain profits.

A report reveals 95% of firms are confident in ransomware recovery, but only 15% fully restore data, highlighting a growing risk from AI-enhanced attacks and lack of governance.

CryptoChameleon is using a fake LastPass "death certificate" email, amplified by vishing calls, to steal master passwords and passkeys for crypto theft.

A chaotic raid on KK Park, a notorious scam center in Myanmar, led to thousands of trafficked workers fleeing across the border into Thailand.

A flawed HP OneAgent update inadvertently deleted critical Entra ID system certificates on corporate laptops, severing them from the cloud and requiring manual recovery.

China's Global Computing Consortium launched UBIOS, its first national standard firmware, to replace UEFI/BIOS and secure the nation's core computing infrastructure.

Two British teenagers linked to Scattered Spider are set for trial over a 2024 Transport for London cyberattack that caused an estimated £39M in losses and disrupted transit systems.

72 nations signed the UN Cybercrime Convention in Hanoi, establishing the first global framework for electronic evidence and criminalizing online exploitation.

Kaspersky uncovered Operation ForumTroll, an espionage campaign exploiting a Chrome zero-day (CVE-2025-2783) to install Dante spyware on Russian targets.

The Transparent Tribe APT is exploiting Indian government targets by deploying the new DeskRAT malware via phishing to steal data from BOSS Linux systems.