In 2025, email phishing attacks have reached unprecedented sophistication, with cybercriminals deploying advanced techniques to bypass traditional security defenses and exploit human vulnerabilities. This evolution […]
Year: 2025
Amazon Web Services Outage Disrupts Global Internet Services
In the early hours of October 20, 2025, Amazon Web Services (AWS), a cornerstone of global internet infrastructure, experienced a significant outage that disrupted operations […]
Pwn2Own Ireland 2025: 73 Zero-Day Vulnerabilities Uncovered, Over $1 Million Awarded
The Pwn2Own Ireland 2025 competition concluded with security researchers identifying 73 unique zero-day vulnerabilities across a diverse array of devices, culminating in a total of […]
Sophisticated Spearphishing Campaign Targets Humanitarian Organizations with Weaponized PDFs
In early October 2025, cybersecurity researchers uncovered a highly sophisticated spearphishing campaign targeting humanitarian organizations and Ukrainian government agencies. The attackers employed weaponized PDF attachments […]
WhatsApp Zero-Click Vulnerability Privately Reported to Meta During Pwn2Own Hacking Contest
At the recent Pwn2Own Ireland 2025 hacking competition, held from October 21 to 23 in Cork, cybersecurity researchers from Team Z3 opted to privately disclose […]
RedTiger: Open-Source Red Teaming Tool Exploited to Target Gamers and Discord Users
RedTiger, an open-source red-teaming tool initially designed for penetration testing, has been co-opted by cybercriminals to extract sensitive information from gamers and Discord users. Launched […]
Unencrypted OAuth Tokens in ChatGPT Atlas Pose Significant Security Risks
OpenAI’s recent release of the ChatGPT Atlas browser has unveiled a critical security vulnerability: the storage of unencrypted OAuth tokens within a SQLite database on […]
MuddyWater’s Advanced Cyber-Espionage Campaign Deploys Phoenix Backdoor v4
The Iranian-linked Advanced Persistent Threat (APT) group known as MuddyWater has recently intensified its cyber-espionage activities, targeting over 100 governmental and international organizations across the […]
SideWinder APT Group Employs ClickOnce Deployment to Distribute StealerBot Malware in South Asia
The SideWinder advanced persistent threat (APT) group has recently adopted a sophisticated attack strategy utilizing Microsoft’s ClickOnce deployment technology to disseminate StealerBot malware. This campaign, […]
New Python-Based Remote Access Trojan Masquerades as Legitimate Minecraft Client
A sophisticated Python-based Remote Access Trojan (RAT) has recently emerged within the gaming community, camouflaging itself as a legitimate Minecraft client to infiltrate unsuspecting users’ […]