A passionate Security Researcher and Cybersecurity Educator, dedicated to discovering and ethically exploiting vulnerabilities across web apps, networks, APIs, mobile platforms, and cloud environments. With a focus on real-world impact, the expertise gained is translated into engaging training materials and courses, covering topics like penetration testing, vulnerability management, and secure coding. Committed to sharing knowledge, the goal is to empower others to strengthen their cybersecurity skills and defend against emerging threats.
Microsoft has released an out-of-band (OOB) update for Windows Server 2022 to fix a critical Hyper-V bug causing virtual machines (VMs) to freeze or reboot unexpectedly. The issue particularly affects Confidential VMs in Azure—a specialized type of virtual machine designed to protect data during processing,…
Continue reading...
Introduction Fileless cyberattacks are becoming increasingly common in today's threat landscape. These attacks execute malicious code directly in system memory, often using legitimate system utilities instead of saving infected files to disk. As a result, fileless malware leaves few traces and frequently evades traditional file-based…
Continue reading...
The Golden Chickens group (also known as Venom Spider) recently released a new info-stealer malware called TerraStealerV2, designed to steal passwords, browser data, and cryptocurrency wallets. This development in the Golden Chickens' arsenal signals an escalation in cyber threats, as the group is known for…
Continue reading...
When AI Becomes the Attack Surface In a digital landscape increasingly dominated by artificial intelligence, security researchers have uncovered a sobering reality: even the very engines powering the AI revolution can become prime targets. According to a recent Trend Micro report, multiple critical vulnerabilities have…
Continue reading...
A malicious Python package named “disgrasya” has been discovered on Python Package Index (PyPI), used as a tool for credit card fraud. This package exploited the WooCommerce API to automate stolen card verification and reached over 34,000 downloads, highlighting a serious and widespread threat in…
Continue reading...
In March 2025, cybersecurity researchers from ThreatFabric sounded the alarm over a new Android threat: Crocodilus, a highly sophisticated banking trojan specifically targeting users in Spain and Turkey—but with the potential to go global. Unlike typical malware clones, Crocodilus emerged as a fully-developed threat from…
Continue reading...
In today’s fast-evolving digital landscape, where cyber attackers constantly innovate, security researchers are sounding the alarm about a new sophisticated threat: CoffeeLoader. Recently analyzed by Zscaler ThreatLabz, this malware is designed to download and execute secondary payloads while evading traditional antivirus and EDR (Endpoint Detection…
Continue reading...
Cybercriminals are exploiting new vulnerabilities in widely used enterprise software, posing severe risks to businesses and government agencies. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five critical security flaws in Advantive VeraCore and Ivanti Endpoint Manager (EPM) to its Known Exploited Vulnerabilities (KEV) catalog. These flaws are already under active…
Continue reading...