My Courses
-
UAC-0099 Hackers Exploiting HTA Files to Distribute MATCHBOIL Loader Malware
The Ukrainian threat intelligence group UAC-0099 has significantly advanced its cyber warfare capabilities by deploying a sophisticated malware toolkit aimed at Ukrainian state authorities, Defence Forces, and defence industrial enterprises. The National Cyber Incident Response Team CERT-UA has documented a series of coordinated attacks that utilise HTA (HTML Application) files as the primary delivery mechanism…
-
More than 1 million individuals affected by the DaVita data breach.
DaVita has recently informed over 1 million individuals that their personal and health information has been compromised in a significant ransomware attack. This breach has raised serious concerns regarding data security and the protection of sensitive information. The affected individuals have been notified about the potential risks associated with the theft of their data, which…
-
WhatsApp has introduced a new security feature that enables users to pause, inquire about, and verify potentially harmful messages.
WhatsApp has introduced a robust security enhancement featuring a “pause, question, and verify” protocol aimed at safeguarding users from advanced messaging scams. In the first half of 2025, the platform successfully disrupted over 6.8 million accounts associated with criminal scam centres, while also implementing automated detection algorithms and contextual safety overlays. These innovations assist users…
-
Salesforce instances at Google have been compromised in a continuing attack, resulting in hackers stealing user information.
Google has confirmed that one of its corporate Salesforce instances was compromised in June by the threat group tracked as UNC6040. This incident is part of a broader Salesforce attack campaign involving voice phishing attacks aimed at stealing sensitive data from organisations’ Salesforce environments, followed by extortion demands. The breach underscores the increasing risks associated…
-
Pandora, the worldwide jewelry brand, has experienced a security breach resulting in the exposure of customer information.
Danish jewellery giant Pandora has disclosed a significant data breach that compromised customer information through a third-party vendor platform. The company has begun notifying affected customers, starting with Italian markets, about the cybersecurity incident that resulted in unauthorized access to personal data. Key takeaways from the breach include a supply-chain attack via a third-party vendor…
-
Renting Homes in Australia: A Shocking Security Risk
When renting homes in Australia, the thrill of finding a new place can quickly turn into concern if youre unaware of the security risks renting may pose. From inadequate locks to unmonitored access to your personal information, its essential to approach your rental journey with a keen eye for safety.
-
New UK System: Must-Have Protection for Satellites Against Attacks
As satellite threats continue to rise, the new UK satellite protection system emerges as a vital shield, ensuring these critical assets remain safe from attacks and disruptions in our increasingly interconnected world.
-
Chinese cybercriminals breached the security of as many as 115 million payment cards in the United States.
A sophisticated Chinese cybercriminal syndicate has orchestrated one of the most devastating payment card fraud operations in recorded history, potentially compromising between 12.7 million and 115 million payment cards across the United States between July 2023 and October 2024. This operation signifies a fundamental paradigm shift in financial cybercrime, merging advanced SMS phishing techniques with…
-
Chinese cybercriminals are taking advantage of vulnerabilities in SharePoint to launch toolsets that include backdoors, ransomware, and loaders.
A sophisticated Chinese threat actor has been exploiting critical vulnerabilities in Microsoft SharePoint to deploy an advanced malware toolset known as “Project AK47,” as revealed by new research from Palo Alto Networks Unit 42. This campaign, active since at least March 2025, marks a significant escalation in attacks targeting enterprise SharePoint environments through a technique…
-
The Akira ransomware employs Windows drivers to evade antivirus and endpoint detection and response systems during attacks on SonicWall.
Akira Ransomware affiliates have recently employed sophisticated evasion techniques that exploit legitimate Windows drivers to bypass antivirus and endpoint detection and response (EDR) systems during SonicWall VPN attack campaigns. These attacks, which escalated from late July through early August 2025, highlight the evolving tactics of threat actors aiming to maintain persistence and avoid detection in…