My Courses
-
A summary of the key announcements from vendors at Black Hat USA 2025 (Part 1).
The 2025 edition of the Black Hat conference in Las Vegas has become a significant platform for numerous companies to showcase their latest products and…
-
Misconfigurations Should Not Be Considered Vulnerabilities: The Expensive Misunderstanding Surrounding Security Threats.
In SaaS security discussions, the terms “misconfiguration” and “vulnerability” are frequently used interchangeably, yet they represent distinct concepts. Misunderstanding this difference can lead to significant…
-
Cybercriminals have the ability to access IIS machine keys by taking advantage of a vulnerability in SharePoint’s deserialization process.
Hackers are employing a sophisticated attack method that exploits a deserialization vulnerability in SharePoint to steal Internet Information Services (IIS) Machine Keys. This exploitation allows…
-
The August 2025 update for Android addresses a Qualcomm vulnerability that has been exploited.
The Android August 2025 security update addresses a critical vulnerability affecting the Adreno GPU, which was confirmed to have been exploited as early as June….
-
How Leading CISOs Manage Their SOCs to Avoid Alert Overload and Ensure No Genuine Incidents are Overlooked
Security Operations Centre (SOC) teams often find themselves overwhelmed by alerts, despite significant investments in security tools. False positives accumulate, stealthy threats evade detection, and…
-
Well-known Chollima APT hackers are targeting job applicants and organizations to distribute JavaScript-based malware.
The North Korean-linked Famous Chollima APT group has emerged as a sophisticated threat actor, orchestrating targeted campaigns against job seekers and organisations through deceptive recruitment…
-
Chanel, a leading fashion brand, has been targeted in a series of cyberattacks linked to vulnerabilities in Salesforce.
Chanel has become the latest victim of a sophisticated cybercrime campaign targeting major corporations through their Salesforce customer relationship management systems. The company confirmed on…
-
SonicWall is actively searching for zero-day vulnerabilities following a significant increase in attacks targeting firewalls.
Threat actors are reportedly exploiting a zero-day vulnerability in SonicWall firewalls, leading to a new wave of ransomware attacks. This alarming trend has prompted SonicWall…
-
Microsoft is providing a $5 million prize at the Zero Day Quest hacking competition.
Microsoft has announced an exciting opportunity for cybersecurity researchers and ethical hackers with its upcoming Zero Day Quest competition, set to take place in spring…
-
A campaign utilizing artificial intelligence has created 15,000 counterfeit TikTok Shop websites that distribute malware and steal cryptocurrency.
Cybersecurity researchers have uncovered a widespread malicious campaign targeting TikTok Shop users globally, aiming to steal credentials and distribute trojanized applications. Threat actors exploit the…