Cloudflare has announced the open beta release of MCP Server Portals, a significant advancement aimed at centralizing, securing, and monitoring all Model Context Protocol (MCP) […]
Month: August 2025
Emulating Scattered Spider’s Tactics: Enhancing Cybersecurity Through Realistic Threat Simulations
In the ever-evolving landscape of cyber threats, the Scattered Spider advanced persistent threat (APT) group has emerged as a formidable adversary. Active since May 2022, […]
ShadowSilk’s Exploitation of Penetration-Testing Tools and Public Exploits in Cyber Attacks
In late 2023, a sophisticated cyber threat group known as ShadowSilk emerged, targeting government entities across Central Asia and the broader Asia-Pacific (APAC) region. This […]
Critical Zero-Day Exploit Targets FreePBX Servers: Immediate Action Required
A severe zero-day vulnerability has been identified in FreePBX versions 16 and 17, posing a significant risk to systems with publicly accessible Administrator Control Panels […]
Cisco IMC Virtual Keyboard Video Monitor Vulnerability Enables Malicious Redirection
Cisco has identified a significant security vulnerability within the Virtual Keyboard Video Monitor (vKVM) component of its Integrated Management Controller (IMC). This flaw, designated as […]
CrowdStrike’s Acquisition of Onum: Elevating Falcon Next-Gen SIEM with Real-Time Telemetry
In a strategic move to bolster its cybersecurity capabilities, CrowdStrike (NASDAQ: CRWD) has announced its intent to acquire Onum, a Spanish startup specializing in real-time […]
China’s Salt Typhoon: A Persistent Threat to Global Critical Infrastructure
Over the past several years, a sophisticated cyberespionage group known as Salt Typhoon, linked to China’s state-sponsored activities, has systematically infiltrated critical infrastructure networks worldwide. […]
Malicious Nx Packages in ‘s1ngularity’ Attack Expose 2,349 GitHub, Cloud, and AI Credentials
The maintainers of the Nx build system have recently disclosed a significant supply chain attack that compromised several versions of the popular npm package and […]
U.S. Treasury Targets North Korean IT Worker Scheme, Unveiling $600K Crypto Transfers and Over $1M in Profits
The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has recently imposed sanctions on two individuals and two entities involved in a […]
Salt Typhoon Exploits Cisco, Ivanti, and Palo Alto Vulnerabilities to Breach 600 Organizations Globally
The advanced persistent threat (APT) group known as Salt Typhoon, linked to China, has intensified its cyber espionage activities, targeting a diverse range of sectors […]