A passionate Security Researcher and Cybersecurity Educator, dedicated to discovering and ethically exploiting vulnerabilities across web apps, networks, APIs, mobile platforms, and cloud environments. With a focus on real-world impact, the expertise gained is translated into engaging training materials and courses, covering topics like penetration testing, vulnerability management, and secure coding. Committed to sharing knowledge, the goal is to empower others to strengthen their cybersecurity skills and defend against emerging threats.
June 2025 — A chilling wake-up call for energy sector cybersecurity In late June 2025, cybersecurity researchers uncovered a sophisticated new threat targeting critical infrastructure: a malware campaign dubbed OneClik. This advanced persistent threat (APT) operation is notable not only for its technical sophistication, but…
Continue reading...
In mid-June 2025, researchers from Zimperium zLabs disclosed a concerning development of the Android banking Trojan known as Godfather. Its latest version leverages an advanced on-device virtualization technique to take over legitimate banking apps, enabling the theft of authentication data and even the initiation of…
Continue reading...
Researchers at Aikido Security uncovered a sophisticated supply‑chain malware operation that compromised at least 16 popular packages in the npm and PyPI ecosystems, affecting nearly 1,000,000 weekly downloads. In recent years, open‑source package ecosystems (npm, PyPI, RubyGems, etc.) have become a “highway” for attackers into…
Continue reading...
Microsoft has released an out-of-band (OOB) update for Windows Server 2022 to fix a critical Hyper-V bug causing virtual machines (VMs) to freeze or reboot unexpectedly. The issue particularly affects Confidential VMs in Azure—a specialized type of virtual machine designed to protect data during processing,…
Continue reading...
Introduction Fileless cyberattacks are becoming increasingly common in today's threat landscape. These attacks execute malicious code directly in system memory, often using legitimate system utilities instead of saving infected files to disk. As a result, fileless malware leaves few traces and frequently evades traditional file-based…
Continue reading...
The Golden Chickens group (also known as Venom Spider) recently released a new info-stealer malware called TerraStealerV2, designed to steal passwords, browser data, and cryptocurrency wallets. This development in the Golden Chickens' arsenal signals an escalation in cyber threats, as the group is known for…
Continue reading...
When AI Becomes the Attack Surface In a digital landscape increasingly dominated by artificial intelligence, security researchers have uncovered a sobering reality: even the very engines powering the AI revolution can become prime targets. According to a recent Trend Micro report, multiple critical vulnerabilities have…
Continue reading...
A malicious Python package named “disgrasya” has been discovered on Python Package Index (PyPI), used as a tool for credit card fraud. This package exploited the WooCommerce API to automate stolen card verification and reached over 34,000 downloads, highlighting a serious and widespread threat in…
Continue reading...