My Courses
-
FreePBX servers exploited by zero-day vulnerability
The Sangoma FreePBX Security Team has issued a critical advisory regarding an actively exploited zero-day vulnerability affecting FreePBX systems with an exposed Administrator Control Panel…
-
Can your security system monitor your employee’s generative AI prompts?
Generative AI platforms such as ChatGPT, Gemini, Copilot, and Claude are becoming increasingly prevalent in organisations. While these solutions enhance efficiency across various tasks, they…
-
Storm-0501 utilizes Entra ID to extract and erase Azure data during hybrid cloud attacks
The financially motivated threat actor known as Storm-0501 has been observed refining its tactics to conduct data exfiltration and extortion attacks targeting cloud environments. Unlike…
-
First AI-driven ransomware leveraging OpenAI model
ESET, a cybersecurity company, has disclosed the discovery of an artificial intelligence (AI)-powered ransomware variant codenamed PromptLock. Written in Golang, this newly identified strain utilises…
-
Anthropic AI used for cybercrime
A new report from Anthropic reveals that criminals are increasingly using AI to manage various aspects of their operations. The findings indicate that AI is…
-
Counterfeit PDF editing software downloads TamperedChef malware
Cybersecurity researchers have uncovered a sophisticated cybercrime campaign that employs malvertising techniques to redirect victims to fraudulent websites, ultimately delivering a new information stealer known…
-
Visual Studio Code vulnerability allows deleted extension takeover
Cybersecurity researchers have uncovered a significant loophole in the Visual Studio Code Marketplace that enables threat actors to reuse names of previously removed extensions. Software…
-
s1ngularity Nx attack exposes GitHub credentials
The maintainers of the Nx build system have issued a warning regarding a supply chain attack that enabled attackers to publish malicious versions of the…
-
Git vulnerability CVE-2025-48384 allows remote code execution
CVE-2025-48384 is a recently patched vulnerability in the widely used distributed revision control system Git, which is currently being exploited by attackers. The US Cybersecurity…
-
Over 300,000 Plex Media Server installations remain susceptible to exploitation due to CVE-2025-34158
Over 300,000 internet-facing Plex Media Server instances remain vulnerable to the critical CVE-2025-34158, despite a fix being issued earlier this month. Plex Media Server (PMS)…
