This is a section for all my blogs.
Hackers Jailed for TfL Cyberattack
Overview Two young members of the Scattered Spider cybercrime group have been sentenced to prison for a 2024 cyberattack on Transport for London (TfL) that […]
BLOGS
n8n’s Exchange Flaw Could Let Attackers Log
Overview A critical flaw in n8n’s Enterprise token exchange feature has been disclosed, tracked as CVE‑2026‑59208. The vulnerability allowed attackers to log in as users […]
7‑Zip Vulnerability
Overview A newly disclosed flaw in 7‑Zip, one of the world’s most widely used open‑source file archiving tools, could allow attackers to execute arbitrary code […]
macOS Malware Forces Users to Reveal Login Passwords
Overview Researchers at Group‑IB have uncovered a new macOS information‑stealing malware dubbed ClickLock, which uses coercive social engineering loops to trap victims into entering their […]
Exploited Oracle E-Business Flaw
Overview The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive requiring federal agencies to patch a critical Oracle E-Business Suite (EBS) […]
Hijacked 20+ Brazilian Websites
Overview Researchers at ANY.RUN have uncovered a large‑scale PhantomEnigma campaign that hijacked more than 20 Brazilian government websites to deliver malware. By exploiting trusted .gov.br […]
OpenAI Launches GPT‑Red
Overview OpenAI has unveiled GPT‑Red, an internal automated red‑teaming model designed to identify and remediate prompt injection vulnerabilities in GPT‑5.6 Sol. This innovation addresses a […]
Zoom Vulnerability in Windows Clients
Overview Zoom has issued a critical security advisory for a vulnerability in its Windows desktop client and SDK, warning that attackers could exploit the flaw […]
Exploited SharePoint
Overview The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical advisory warning that attackers are actively exploiting three SharePoint Server vulnerabilities — […]
Fake NVIDIA Software!
Overview Researchers at Blackpoint Cyber’s Adversary Pursuit Group (APG) have uncovered a new Rust-based remote access tool (RAT) dubbed LabubaRAT, which disguises itself as legitimate […]