My Courses
-
Serious vulnerability in Android system components permits remote code execution without requiring any user interaction.
On August 4, 2025, Google released its Android Security Bulletin, highlighting a critical vulnerability that poses significant risks to Android device users worldwide. The most severe flaw, designated CVE-2025-48530, affects the core System component and could enable remote code execution without requiring any user interaction. This makes it particularly dangerous for millions of Android devices…
-
SonicWall is looking into a possible zero-day vulnerability in its SSL VPN following reports of over 20 targeted attacks.
SonicWall is currently investigating reports of a potential new zero-day vulnerability following a significant increase in Akira ransomware activity targeting Gen 7 SonicWall firewalls with SSL VPN enabled. Over the past 72 hours, both internal and external reports have indicated a surge in cyber incidents related to these devices. SonicWall is working to determine whether…
-
A vulnerability chain in NVIDIA Triton has the potential to allow attackers to gain control over AI servers.
A critical vulnerability chain has been identified in NVIDIA’s Triton Inference Server, allowing unauthenticated attackers to achieve complete remote code execution (RCE) and gain full control over AI servers. This vulnerability chain, designated as CVE-2025-23319, CVE-2025-23320, and CVE-2025-23334, exploits the server’s Python backend through a sophisticated three-step attack process involving shared memory manipulation. The attack…
-
A new Android malware is disguising itself as SBI Card and Axis Bank applications to extract users’ financial information.
A sophisticated new Android malware campaign has emerged, specifically targeting Indian banking customers by impersonating popular financial applications. This malicious software masquerades as legitimate apps from major Indian financial institutions, including SBI Card, Axis Bank, Indusind Bank, ICICI, and Kotak. It deceives users into downloading fake applications that steal sensitive financial information. The malware operates…
-
Raspberry Robin malware downloader is targeting Windows systems by utilizing a new exploit related to a frequently used vulnerability in the Log File System Driver.
The cybersecurity landscape is under constant threat from Raspberry Robin, a sophisticated malware downloader also known as Roshtyak. This malware, first identified in 2021, continues its campaign against Windows systems with enhanced capabilities and evasion techniques. Primarily targeting enterprise environments, Raspberry Robin propagates through infected removable storage devices, maintaining its original infection vector by leveraging…
-
WAF protection was circumvented to execute XSS payloads through JavaScript injection by utilizing parameter pollution.
Bruno Mendes conducted research revealing a sophisticated method to bypass Web Application Firewall (WAF) protections through HTTP Parameter Pollution techniques combined with JavaScript injection. This study examined 17 different WAF configurations from major vendors, including AWS, Google Cloud, Azure, and Cloudflare, and uncovered alarming vulnerabilities within the current web security infrastructure. The technique exploits fundamental…
-
Malicious actors are currently taking advantage of weaknesses in the open-source ecosystem to distribute harmful software.
The open-source software ecosystem, once a stronghold of collaborative development, has increasingly attracted cybercriminals aiming to infiltrate supply chains and compromise downstream systems. Analysis from the second quarter of 2025 indicates that threat actors are exploiting vulnerabilities in popular package repositories to distribute malware, exfiltrate sensitive data, and establish persistent footholds in victim environments. This…
-
M&S Cyberattacks: Stunning Technique Exposes Vulnerable Users
M&S cyberattacks are making headlines, revealing just how vulnerable we all are in the digital landscape. Understanding these threats is crucial, especially as phishing schemes and malware become increasingly sophisticated, targeting unsuspecting users.
-
Stay Safe from Scams: 5 Must-Have Tips for Protection
Navigating the digital world requires vigilance, especially when you want to stay safe from scams. With clever tactics on the rise, knowing how to protect yourself is more important than ever—so let’s dive into five essential tips to ensure your online safety!
-
Fraud Prevention: 6 Effortless Steps to Stay Safe
In a world where digital transactions are the norm, knowing the best fraud prevention steps can be your shield against deceptive practices. Discover how simple actions can safeguard your personal information and keep your finances safe!