This is a section for all my blogs.
A new scam is exploiting PayPal’s Subscriptions billing feature to send legitimate PayPal emails that contain fake purchase notifications, tricking recipients into believing they bought […]
A newly disclosed zero‑click vulnerability dubbed GeminiJack exposed Gmail, Calendar, and Docs data in Google Gemini Enterprise (formerly Vertex AI Search). What Happened How GeminiJack […]
CastleLoader, a malware loader operated by the threat actor GrayBravo (formerly TAG‑150), is now being used by four distinct threat clusters, confirming its role as […]
Fortinet has disclosed a critical vulnerability (CWE‑347: Improper Verification of Cryptographic Signature) affecting FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager. What’s the Issue Mitigation & Workarounds Affected […]
Microsoft has introduced a new security prompt in Windows PowerShell 5.1 to mitigate a high‑severity remote code execution vulnerability (CVE‑2025‑54100). This change is aimed at […]
Three major enterprise vendors — Fortinet, Ivanti, and SAP — have released urgent fixes for vulnerabilities that could lead to authentication bypass and remote code […]
Cybersecurity researchers have uncovered malicious packages across multiple developer ecosystems — VS Code extensions, Go libraries, npm modules, and Rust crates — all designed to […]
A new packer-as-a-service platform called Shanya is being widely adopted by ransomware groups to conceal EDR (Endpoint Detection and Response) killers inside their payloads. Key […]
This sponsored piece from Picus Security explains how their Agentic BAS (Breach and Attack Simulation) AI transforms breaking threat intelligence into actionable defense validation — […]
Incident overview Scope of Clop’s campaign Barts Health response Why this matters Actionable steps for organizations
Copyright © 2026 | WordPress Theme by MH Themes