In late September 2025, cybersecurity researchers identified a new ransomware strain named Monolock, which has been actively promoted on dark web forums. Threat actors are […]
Year: 2025
Emergence of GlassWorm: A Stealthy Malware Targeting VS Code Extensions
In recent developments, the cybersecurity community has been alerted to a sophisticated malware campaign known as GlassWorm. This self-propagating threat specifically targets Visual Studio (VS) […]
Exploiting Azure’s Unicode Vulnerability: A Gateway for Cybercriminals
In the ever-evolving landscape of cybersecurity, a recent discovery has unveiled a significant vulnerability within Microsoft’s Azure ecosystem. This flaw allows cybercriminals to craft deceptive […]
Critical Vulnerabilities in Oracle E-Business Suite’s Marketing Module Pose Severe Security Risks
Oracle has recently identified two critical security flaws within its E-Business Suite’s Marketing module, designated as CVE-2025-53072 and CVE-2025-62481. These vulnerabilities, each assigned a Common […]
Chinese Cyber Espionage Groups Exploit ToolShell Vulnerability to Infiltrate Global Government Networks
In a series of sophisticated cyberattacks, Chinese state-sponsored hacking groups have been exploiting a critical vulnerability in Microsoft SharePoint servers, known as ToolShell, to infiltrate […]
Decoding Microsoft 365 Audit Log Events Using Bitfield Mapping Technique
When users authenticate to Microsoft cloud services, their activities generate authentication events recorded across multiple logging systems. Both Microsoft Entra sign-in logs and Microsoft 365 […]
GitLab Releases Critical Security Patches to Address Multiple Vulnerabilities
GitLab has recently issued urgent security updates for its Community Edition (CE) and Enterprise Edition (EE) to address several critical vulnerabilities that could potentially allow […]
Lumma Infostealer: A Persistent Threat to Digital Security
Since its emergence in August 2022, Lumma Infostealer has rapidly become a significant tool in the malware-as-a-service (MaaS) landscape, enabling even unskilled cybercriminals to harvest […]
PassiveNeuron Cyberespionage Campaign Targets Global Organizations with Advanced Malware
A sophisticated cyberespionage campaign, known as PassiveNeuron, has re-emerged, targeting government, financial, and industrial organizations across Asia, Africa, and Latin America. Initially detected in 2024, […]
Emergence of Tykit Phishing Kit: A Sophisticated Threat to Corporate Credentials
In the evolving landscape of cyber threats, a new phishing kit named Tykit has surfaced, posing significant risks to corporate security. First identified in May […]