My Courses
-
Malicious actors exploiting video download site to distribute Proxyware malware
Cybercriminals have escalated their proxyjacking campaigns by exploiting legitimate user behaviour surrounding YouTube video downloads, as highlighted in a recent security analysis. This attack utilises fake YouTube download sites to distribute proxyware malware, specifically targeting users in search of free video conversion services. This sophisticated campaign marks a significant evolution in bandwidth theft attacks, where…
-
Recent developments in phishing attacks are emerging as cybercriminals increasingly leverage AI to enhance their tactics.
The cybersecurity landscape is undergoing a significant transformation as artificial intelligence emerges as a powerful tool in the hands of cybercriminals, fundamentally changing traditional phishing and scam operations. Unlike earlier phishing campaigns, which were often characterised by grammatical errors and obvious signs of deceit, modern AI-driven attacks present a sophisticated challenge that can deceive even…
-
In July, Qilin Ransomware has emerged as a significant threat, claiming over 70 victims.
The ransomware threat landscape experienced a troubling increase in July 2025, with the Qilin Ransomware Group solidifying its dominant position for the third time in four months. The group successfully claimed 73 victims on its data leak site, accounting for 17.3% of the month’s total 423 ransomware incidents. This trend signifies a notable consolidation of…
-
New FireWood malware targeting Linux systems
A sophisticated new variant of the FireWood backdoor has emerged, specifically targeting Linux systems with enhanced evasion capabilities and streamlined command execution functionality. This latest iteration signifies a substantial evolution of the malware family first discovered by ESET’s research team, which has been linked to the long-running “Project Wood” malware lineage dating back to at…
-
Cisco Secure Firewall vulnerability enables remote shell command injections
Cisco has disclosed a critical security vulnerability in its Secure Firewall Management Center (FMC) Software, which could allow unauthenticated attackers to execute arbitrary shell commands with high-level privileges remotely. The vulnerability, tracked as CVE-2025-20265 and assigned the maximum CVSS score of 10.0, is one of the most severe security flaws identified in enterprise firewall infrastructure…
-
CVE-2025-8088 – WinRAR path traversal vulnerability exploited to run malicious software
A zero-day vulnerability in WinRAR, tracked as CVE-2025-8088, poses significant risks to users of the popular file archiving tool. This path traversal flaw affects the Windows version of WinRAR, allowing attackers to execute arbitrary code through specially crafted archives. Discovered in mid-July 2025, the vulnerability highlights the dangers of delayed patching amid increasingly sophisticated phishing…
-
EncryptHub using Brave Support Platform to weaponise MMC vulnerability
The cyberthreat landscape is increasingly complex as malicious actors refine their attack strategies, with the EncryptHub threat group, also known as LARVA-208 and Water Gamayun, emerging as a significant concern. This group has gained notoriety for its aggressive campaigns targeting Web3 developers and for exploiting legitimate platforms to deliver harmful payloads. As of February 2025,…
-
Brivo’s Visitor Management system, enhanced by Envoy, enhances security at the front desk.
Brivo has announced a strategic partnership with Envoy, integrating Envoy’s workplace platform into the Brivo Security Suite. This collaboration merges workplace experience with physical security, creating a modern and secure sign-in process that caters to organisations of all sizes, from single offices to Fortune 500 enterprises. The partnership simplifies visitor management and enhances front-desk security…
-
Hacked police and government emails for sale: $40 ono
Active police and government email accounts are being sold on the dark web for as little as $40, providing cybercriminals with direct access to systems that depend on institutional trust. Research from Abnormal AI reveals that these accounts originate from agencies in the United States, United Kingdom, Germany, India, and Brazil, and are traded on…
-
How ShinyHunters Infiltrated Google, Adidas, Louis Vuitton, and Other Brands
The cybersecurity landscape experienced a sophisticated and ongoing attack campaign throughout 2025, successfully compromising major corporations such as Google, Adidas, and Louis Vuitton, among others. This comprehensive technical analysis highlights how the notorious cybercriminal group ShinyHunters, in apparent collaboration with Scattered Spider, executed one of the most effective social engineering campaigns targeting Salesforce Customer Relationship…