This is a section for all my blogs.
Japan’s largest beer producer, Asahi Group Holdings, has confirmed that the September 2025 ransomware attack impacted up to 1.9 million individuals. Key Findings Attack Timeline […]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2021-26829 — a cross-site scripting (XSS) flaw in OpenPLC ScadaBR — to its Known Exploited […]
Researchers at ReversingLabs have uncovered a latent supply‑chain vulnerability in several Python packages that still ship legacy bootstrap.py scripts tied to the discontinued Distribute project. […]
The emergence of unrestricted large language models (LLMs) like WormGPT 4 and KawaiiGPT marks a turning point in cybercrime tooling. These models are specifically tuned […]
ASUS has issued a firmware update to patch nine vulnerabilities, including a critical authentication bypass flaw (CVE-2025-59366) affecting routers with AiCloud enabled. This flaw allows […]
A new campaign highlights the convergence of RomCom (a Russia‑aligned threat actor) and SocGholish (aka FakeUpdates), a long‑running JavaScript loader used by multiple cybercrime groups. […]
What happened: A new wave of Sha1‑Hulud supply‑chain attacks trojanized hundreds of npm packages (uploaded Nov 21–23, 2025) to run malicious code during the preinstall […]
Microsoft confirmed a timing bug in Windows 11 24H2 cumulative updates (since July 2025) that prevents key XAML packages from registering quickly enough after update/install. […]
Researchers at the University of Vienna demonstrated a powerful account‑enumeration technique against WhatsApp that allowed them to check hundreds of millions of phone numbers per […]
Sneaky2FA’s adoption of the browser‑in‑the‑browser (BitB) trick marks a meaningful escalation in phishing sophistication. The kit already automated real‑time MFA relay (AitM) and SVG‑based UI […]
Copyright © 2026 | WordPress Theme by MH Themes