September 8, 2026
Topics
Passwords have been the typical option for people to protect online accounts for decades. Almost everything from social media to banking accounts requires one. However, passwords have also become one of the biggest weaknesses in security.
Read More
August 14, 2026
Cybersecurity is often thought of as a technology problem. Organizations spend tons of money on firewalls, endpoint protection, multi-factor authentication (MFA), intrusion detection systems, and other security tools. While these technologies are important, there are limits to what they can do. One wrong click by an employee can bypass most of those defenses.
cybersecurity , training , social engineering
July 27, 2026
The Internet of Things (IoT) has become a large part of everyday life. Devices such as smart thermostats, home security cameras, fitness trackers, medical equipment, industrial sensors, and connected vehicles all rely on IoT technology to communicate over the internet. As more devices become connected, they also give cybercriminals more opportunities to exploit security weaknesses. Unlike traditional computers, many IoT devices have limited processing power and storage, which often means they cannot support advanced security features. Some devices also prioritize convenience and low cost over security. Because of this, many IoT systems have weak passwords, outdated software, or insecure network configurations. Securing IoT systems is very important because a single vulnerable device can provide attackers with a way into an entire network.
IoT , Internet of Things
July 7, 2026
Cloud computing has become a central component of IT infrastructure. Many organizations use cloud platforms such as Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP) to host applications, store data, and support business operations. While cloud adoption provides scalability, flexibility, and cost savings, it also introduces new security challenges.
Cloud , AWS , Azure , GCP
June 23, 2026
Nowadays, many organizations rely on open-source libraries, third-party APIs, cloud services, etc., rather than building software solely from in-house code. While this does speed up development, it creates a much larger attack surface. A single compromised dependency, malicious software update, or poorly secured build pipeline can create widespread security issues across connected systems. Software supply chain attacks are especially dangerous because cybercriminals are increasingly shifting away from directly targeting a single organization. Instead, they compromise the tools, vendors, or software components trusted by many organizations simultaneously.
software , supply chain , cloud , APIs
May 7, 2026
Mythos is an advanced AI system capable of finding software vulnerabilities. It can also find zero-day vulnerabilities, previously undisclosed software flaws that remain unpatched, making them especially dangerous if identified by malicious actors. Mythos can generate exploits and simulate attacks without requiring much human input. Instead of it taking days or weeks for a skilled researcher to discover serious vulnerabilities, Mythos can discover them in as little as hours.
AI , cybersecurity , Anthropic , Mythos
April 23, 2026
Artificial intelligence can improve efficiency by reducing the time required to complete many development tasks, but it is not foolproof.
AI , security , development
January 27, 2026
Quantum computing applies the laws of quantum physics to information processing, enabling certain calculations to be performed far more efficiently than is possible with traditional computing systems. Despite its potential benefits, this technological shift introduces serious challenges for the cryptographic methods that currently protect both transmitted and stored data.
quantum computing , encryption , security , algorithms
December 31, 2025
Rather than targeting software flaws, many attackers focus on influencing how people think and respond.
deepfakes , vishing , AI , cybersecurity
December 18, 2025
cybersecurity , infrastructure , utilities
November 20, 2025
cybersecurity , military , drones
September 2, 2025
AI , cybersecurity , vehicles , cars , security
July 21, 2025
rat , powershell , trojan , malware
December 31, 2024
google , encryption , quantum , willow
October 29, 2024
iot , botnet , raptor train , flax typhoon , threat , hackers
July 12, 2024
MOVEit , exploit , vulnerability
July 12, 2024
Recently, Google officially announced that it will be blocking websites on the Google Chrome browser that own Entrust certifications on November 1st, 2024. Google has stated that this mass blocking of Entrust-certified websites is due to Entrust’s lack of congruency and repeated failures to handle security matters efficiently. Google also claims there have been too many internal failures causing irreparable damage to their relationship with Entrust
Google , certificates , Chrome
June 6, 2024
zero-day , vulnerability , TikTok
June 6, 2024
Recently this year, cybersecurity researchers at Wiz Research have found a significant security flaw in AI service provider, Replicate, that could allow hackers to gain its users' sensitive private information and AI models. This breakthrough was found through a coding error in an open-source tool, named Cog that Replicate utilizes.
AI , AI Models
June 6, 2024
Python , Silver C2 Framework , Colbalt Strike
April 19, 2024
March 15, 2024
Volt Typhoon , hackers , cybersecurity , Fortinet
February 14, 2024
Since late 2022, artificial intelligence (AI) has been making headlines almost every week. The first big story on AI was when OpenAI launched their product ChatGPT. Since then, many other companies have followed suit and come up with their own AI chatbots that seem to gain more and more functionality as time goes on. Tech giants like Google and Microsoft have also joined the race to create the best AI with Google launching Gemini (Bard) in early 2023 and Microsoft launching Copilot in late 2023. As AI continues to evolve, the risk it poses to organizations around the world will also increase.
AI , Artificial Intelligence , MFA , Phishing
October 24, 2023
Ever since the invention of internet browsers for personal computers came about in the 1990s, cybercrime has been on the rise. Almost 30 years after the invention of the World Wide Web, cybercriminals have a variety of different methodologies and toolkits they use daily to leverage vulnerabilities and commit crimes. One of the most popular types of attacks that is used by threat actors is a ransomware attack. Most recently, several Las Vegas Casinos fell victim to a series of ransomware attacks.
Social Engineering , Ransomware
October 12, 2023
Hackers, whether they are working by themselves or part of a larger APT (advanced persistence threat) group, are constantly thinking about new ways to launch attacks against individuals and organizations around the world. Most of these hackers and APT groups share common motives ranging from things like revenge and hacktivism to financial gain. Things get a little more complicated when hackers are working on behalf of a state-sponsored operation, especially when that state is North Korea. Recently, there have been reports of hackers connected to the North Korean state posing as job recruiters to deploy complex malware onto the devices of individuals around the world.
advanced persistent threat , Social Engineering
September 7, 2023
In the past couple of months, researchers observed an uptick in malware being delivered to end users through a malspam campaign. Malspam is a term given to spam emails that contain malicious links, contents, or files. One such malware that is currently being spread through malspam is DarkGate. Recently, researchers have begun to investigate new cases of this malware which began spreading in June 2023.
Malware , phishing campaign
September 7, 2023
Many threat actors tend to gravitate towards using some type of remote access trojan (RAT) in their campaigns. RATs are a type of malware that is designed to allow the attacker to have control over an infected device. RATs are a popular choice for hackers to use due to their many capabilities from reconnaissance and data exfiltration to long-term persistence. Throughout the last couple of months, a new Android banking trojan has been making headlines. This trojan, known as MMRat, has been seen targeting mobile users in Asia and has been linked to bank fraud.
Malware
August 7, 2023
Malware
August 7, 2023
Cybersecurity
August 7, 2023
phishing campaign
July 5, 2023
Anonymous Sudan, a hacker group that originated as a Russian-speaking Telegram channel in early January of 2023 has been known to target American technology corporations by launching distributed denial of service attacks.
DDoS
July 5, 2023
Code Mirage: How Cyber Criminals Harness AI-Hallucinated Code for Malicious Machinations
Cybersecurity
June 5, 2023
Unveiling the Tactics of a Notorious Cybercrime Group
Ransomware
June 5, 2023
Unraveling the Chinese Hacking Group "Volt Typhoon": A Global Cybersecurity Threat
nationstate , Cybersecurity
April 10, 2023
With the disablement of VBA macros, threat actors have turned to using OneNote attachments as a new way to install malware on an endpoint. OneNote attachments can contain embedded file formats, such as HTML, ISO, and JScripts, which can be exploited by malicious actors. OneNote attachments are particularly appealing to attackers because they are interactive and designed to be added on to and interacted with, rather than just viewed. This makes it easier for malicious actors to include enticing messages and clickable buttons that can lead to infection
Social Engineering
March 8, 2023
Dridex is a banking Trojan that is primarily used to steal sensitive information, such as login credentials and financial information. Dridex is known for its ability to evade detection by using dynamic configuration files.
Malware
January 5, 2023
GuLoader is an advanced malware downloader that is used by cybercriminals to distribute secondary malware payloads to further their infection chain
Malware
December 7, 2022
Raccoon Stealer was first observed in 2019 and caught everyone’s attention when it became a popular choice for cybercriminals. With its new version released lately, it continues to gain popularity as a preferred tool for threat actors and poses a great threat to organizations that are not properly equipped to defend against information stealing malware such as Raccoon infostealer.
Malware
November 7, 2022
Vice Society is a ransomware group that initially appeared in June 2021. Although the group has been active since then, Vice Society was able to maintain its low profile until now by targeting small-sized schools. What makes Vice Society unique is that it targets organizations that have weaker security controls due to a lack of resources and exploit them for a ransom.
advanced persistent threat
November 4, 2022
Social Engineering
October 5, 2022
A fairly new hacker group known as “Metador” has recently started gaining traction in the news. This group is interesting because their motives are not fueled by any monetary value, however, it seems that the group’s main goal is long-term persistence and espionage. It is hypothesized that this group has been around for about 2-3 years targeting mostly organizations in the Middle East and Africa.
Ransomware
October 5, 2022
Nullmixer is a new malware dropper that gives us another reason to avoid questionable downloads. Your computer can become infected with malware after downloading and running the dropper, which is disguised as illegal, cracked software or some other app that might prompt you to ignore warnings from your antivirus software.
Malware
August 2, 2022
A denial-of-service attack (DoS attack) is a cyber-attack in which an attacker seeks to make a machine or network resource unavailable by disrupting access to that specific machine or network. Denial of service is typically accomplished by flooding the targeted machine or resource with excess requests to prevent legitimate requests from being fulfilled.
DDoS , Denial of Service , Cybersecurity
August 2, 2022
Malware , Cybersecurity , malware analysis
July 4, 2022
Cybersecurity
July 4, 2022
Cybersecurity , Threat Hunting
June 2, 2022
advanced persistent threat , Ransomware , Malware
June 2, 2022
Web Applications are an attackers first choice when trying to compromise an organization. By being one of the few attack vectors that face the public, if not secured correctly, they can be an easy way for attackers to gain a foothold in your organization. In this post we will talk about the vulnerabilities in Web Applications that the OWASP Foundation has highlighted as “Most Critical”.
Topics
