My Courses
-
Cisco Experienced a Security Breach – Cybercriminals Obtained User Profile Information from Cisco.com
Cisco has confirmed that it was the target of a cyberattack, resulting in the theft of basic profile information from an undisclosed number of users registered on Cisco.com. The breach occurred after an employee fell victim to a sophisticated voice phishing, or “vishing,” attack, which the company became aware of on July 24, 2025. While…
-
Cloudflare has accused Perplexity AI of circumventing firewalls and scraping websites by modifying its user agent.
Perplexity AI, an emerging question-answering engine powered by advanced large language models, has recently faced scrutiny for employing stealth crawling techniques that circumvent standard web defences. Initially, Perplexity’s crawlers operated transparently, identifying themselves with user agents like PerplexityBot/1.0 and adhering to robots.txt directives and web application firewall (WAF) rules. However, in early August 2025, researchers…
-
A newly discovered vulnerability in Streamlit enables cybercriminals to execute cloud account takeover attacks.
A critical vulnerability in Streamlit, a widely used open-source framework for building data applications, has been identified, enabling attackers to execute cloud account takeover attacks. Discovered in February 2025, this flaw exploits weaknesses in Streamlit’s st.file_uploader component, allowing attackers to bypass file type restrictions and gain unauthorised access to cloud instances running Streamlit applications. This…
-
APT36 Hackers Targeting Indian Government Organizations to Harvest Login Information
A sophisticated phishing campaign attributed to the Pakistan-linked APT36 group has emerged as a significant threat to Indian government infrastructure. First detected in early August 2025, this operation utilises typo-squatted domains that mimic official government login portals. Unsuspecting users who enter their email IDs and passwords are redirected to counterfeit pages replicating the National Informatics…
-
Cisco announces that user information was compromised during a CRM breach.
Cisco has recently disclosed a significant data breach that has impacted user accounts on Cisco.com. The breach has resulted in the theft of sensitive information, including users’ names, email addresses, and phone numbers. This incident highlights the vulnerabilities that can exist within customer relationship management (CRM) systems, raising concerns about data security and privacy. Cisco…
-
North Korean cybercriminals are exploiting NPM packages to pilfer cryptocurrency and confidential information.
A sophisticated North Korean cryptocurrency theft campaign has resurfaced, utilising twelve malicious NPM packages to target developers and steal digital assets. This campaign marks a significant escalation in supply chain attacks, exploiting the trust developers place in open-source package repositories to distribute advanced malware capable of cross-platform data exfiltration. The attackers employ a cunning social…
-
SonicWall has issued a warning about a rise in cyberattacks aimed at their Generation 7 firewalls over the past 72 hours.
SonicWall has issued an urgent security advisory due to a significant rise in cyber incidents targeting its Gen 7 SonicWall firewalls over the past 72 hours. The company is actively investigating a series of attacks that seem to focus on devices with the Secure Sockets Layer Virtual Private Network (SSLVPN) feature enabled. In a statement…
-
Kimsuky APT hackers are utilizing LNK files as a means to deploy reflective malware, successfully evading detection by Windows Defender.
The North Korean state-sponsored cyber-espionage group Kimsuky has launched a sophisticated campaign targeting South Korean entities through malicious Windows shortcut (LNK) files. This operation exemplifies the group’s evolution in stealth and precision, combining tailored social engineering with advanced malware frameworks. The campaign systematically infiltrates government agencies, defence contractors, and research organisations while evading traditional security…
-
Approov Secures $6.7 Million in Funding to Enhance Mobile App Security
Approov has successfully raised $6.7 million in Series A funding to enhance its mobile application and API security solutions. This significant investment will enable Approov to further develop its innovative technology, aimed at protecting mobile applications from various security threats. With the increasing reliance on mobile apps and APIs in today’s digital landscape, the need…
-
Vibe Coding: If Everyone Becomes a Developer, Who is Responsible for Code Security?
As AI technology continues to democratise software development, security teams encounter a significant challenge in safeguarding applications created by non-developers. This shift towards “Vibe Coding” allows individuals without traditional programming skills to build software at an unprecedented speed and scale. Consequently, the responsibility for ensuring the security of these applications becomes increasingly complex. Security professionals…