My Courses
-
Profile of the Scattered Spider Threat Actor – Recent Strategies, Methods, Practices, and Indicators of Compromise.
Scattered Spider, also known as UNC3944, Octo Tempest, 0ktapus, Muddled Libra, and Scatter Swine, has evolved from basic phishing operations to sophisticated multi-stage ransomware campaigns targeting critical infrastructure. This cybercriminal group has transitioned to hypervisor-level attacks, particularly focusing on VMware vSphere and ESXi environments, which allows them to deploy ransomware directly from hypervisors. Their adoption…
-
Threat actors are exploiting Remote Monitoring and Management (RMM) tools to gain control of systems and extract sensitive information.
Cybercriminals are increasingly exploiting Remote Monitoring and Management (RMM) software to gain unauthorised access to corporate systems. A sophisticated new attack campaign demonstrates how legitimate IT tools can become powerful weapons in the wrong hands. This emerging threat leverages the inherent trust placed in RMM solutions, transforming essential administrative software into conduits for data theft…
-
Digital Government: Exclusive Benefits for Citizens in South Africa
Discover how digital government benefits are transforming citizen engagement in South Africa, making it easier than ever to access services and participate in governance—all from the comfort of your home!
-
Severance: Must-Have Lessons on Cybersecurity Risks
As organizations navigate the complexities of workforce changes, understanding the cybersecurity risks associated with severance is vital for safeguarding sensitive information. In this article, well uncover essential lessons that help both companies and employees stay secure during this crucial transition.
-
Microsoft has launched a new AI initiative aimed at identifying malware through the use of reverse engineering tools.
Microsoft has unveiled Project Ire, an autonomous AI agent capable of reverse engineering and classifying malware at an unprecedented scale. The breakthrough system achieved a precision rate of 0.98 and a recall of 0.83 during testing on Windows drivers, marking a significant advancement in cybersecurity automation. Project Ire represents the first AI system to author…
-
Search results on Bing have been manipulated to distribute Bumblebee malware when users search for ‘ManageEngine OpManager’.
In July 2025, a sophisticated Search Engine Optimisation (SEO) poisoning campaign exploited Bing search results to distribute Bumblebee malware, leading to significant Akira ransomware attacks. This campaign specifically targeted users searching for legitimate IT management software, illustrating how threat actors continue to weaponise trusted search platforms to compromise enterprise networks. The attack commenced when unsuspecting…
-
A significant remote code execution vulnerability in Trend Micro Apex One Management is currently being actively exploited in real-world scenarios.
Critical command injection remote code execution (RCE) vulnerabilities in Trend Micro Apex One Management Console are currently being actively exploited by threat actors. The company has confirmed observing at least one instance of attempted exploitation in production environments, prompting the immediate release of emergency mitigation tools. Two RCE vulnerabilities, designated as CVE-2025-54948 and CVE-2025-54987, have…
-
A zero-day vulnerability in Adobe AEM Forms allows attackers to execute arbitrary code.
Adobe has issued an urgent security update for Adobe Experience Manager Forms on Java Enterprise Edition (JEE) to address two critical zero-day vulnerabilities, CVE-2025-54253 and CVE-2025-54254. These vulnerabilities could enable attackers to execute arbitrary code and gain unauthorized access to the file system. Both flaws have been assigned the highest priority rating by Adobe, with…
-
Vulnerabilities in 100 Dell laptop models have been revealed, allowing for the possibility of implanting malware and bypassing Windows login security.
Recent vulnerabilities identified in the ControlVault3 firmware of Dell laptops have raised significant security concerns. These flaws could potentially allow malicious actors to modify firmware, leading to severe implications for device integrity. With over 100 Dell laptop models affected, the risks include the possibility of implanting unauthorised software that could compromise sensitive data. Furthermore, these…
-
Microsoft has introduced Project Ire, an initiative designed to automatically identify malware using artificial intelligence technologies.
On Tuesday, Microsoft announced the development of an autonomous artificial intelligence (AI) agent designed to analyse and classify software independently, aiming to enhance malware detection capabilities. This large language model (LLM)-powered system, currently in prototype form and codenamed Project Ire, automates the gold standard in malware classification by fully reverse engineering software files without prior…