This is a section for all my blogs.
A maximum‑severity XML External Entity (XXE) injection flaw has been disclosed in Apache Tika, tracked as CVE‑2025‑66516. The vulnerability affects multiple modules and can be […]
A newly disclosed command injection vulnerability in Array Networks AG Series VPN devices is being actively exploited to deploy PHP webshells and create rogue user […]
A new SEO poisoning campaign attributed to the threat actor Silver Fox is targeting Chinese-speaking users and organizations operating in China. The attackers are distributing […]
A new Group-IB report details how the financially motivated cybercrime group GoldFactory has escalated its operations in Southeast Asia, targeting mobile users in Indonesia, Thailand, […]
Two critical plugin vulnerabilities are actively being exploited in the WordPress ecosystem, underscoring the ongoing risk of third‑party add‑ons. CVE‑2025‑8489 — King Addons for Elementor […]
Researchers have uncovered a supply chain attack involving a malicious Rust crate named evm-units, designed to deliver OS-specific malware to developer systems under the guise […]
The Korean National Police have arrested four individuals accused of hacking into more than 120,000 IP cameras across the country and selling stolen intimate footage […]
A seven-year-long campaign by the threat actor ShadyPanda has turned popular browser extensions into spyware, impacting over 4.3 million installations across Chrome and Edge. Key […]
The Glassworm campaign, first spotted in October 2025, has now entered its third wave, with 24 new malicious packages uploaded to both OpenVSX and the […]
The mobile threat landscape is rapidly evolving with malware-as-a-service (MaaS) offerings that democratize access to advanced fraud and surveillance tools. Albiriox RadzaRat BTMOB + UASecurity […]
Copyright © 2026 | WordPress Theme by MH Themes