A passionate Security Researcher and Cybersecurity Educator, dedicated to discovering and ethically exploiting vulnerabilities across web apps, networks, APIs, mobile platforms, and cloud environments. With a focus on real-world impact, the expertise gained is translated into engaging training materials and courses, covering topics like penetration testing, vulnerability management, and secure coding. Committed to sharing knowledge, the goal is to empower others to strengthen their cybersecurity skills and defend against emerging threats.
When AI Becomes the Attack Surface In a digital landscape increasingly dominated by artificial intelligence, security researchers have uncovered a sobering reality: even the very engines powering the AI revolution can become prime targets. According to a recent Trend Micro report, multiple critical vulnerabilities have…
Continue reading...
A malicious Python package named “disgrasya” has been discovered on Python Package Index (PyPI), used as a tool for credit card fraud. This package exploited the WooCommerce API to automate stolen card verification and reached over 34,000 downloads, highlighting a serious and widespread threat in…
Continue reading...
In March 2025, cybersecurity researchers from ThreatFabric sounded the alarm over a new Android threat: Crocodilus, a highly sophisticated banking trojan specifically targeting users in Spain and Turkey—but with the potential to go global. Unlike typical malware clones, Crocodilus emerged as a fully-developed threat from…
Continue reading...
In today’s fast-evolving digital landscape, where cyber attackers constantly innovate, security researchers are sounding the alarm about a new sophisticated threat: CoffeeLoader. Recently analyzed by Zscaler ThreatLabz, this malware is designed to download and execute secondary payloads while evading traditional antivirus and EDR (Endpoint Detection…
Continue reading...
Cybercriminals are exploiting new vulnerabilities in widely used enterprise software, posing severe risks to businesses and government agencies. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five critical security flaws in Advantive VeraCore and Ivanti Endpoint Manager (EPM) to its Known Exploited Vulnerabilities (KEV) catalog. These flaws are already under active…
Continue reading...
Cybersecurity is once again under pressure as the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities in Adobe ColdFusion and Oracle Agile Product Lifecycle Management (PLM) to its Known Exploited Vulnerabilities (KEV) list. These vulnerabilities allow attackers to execute remote code…
Continue reading...
As cyberattacks grow more sophisticated, organizations must take a proactive approach to safeguard their data and critical infrastructure. Penetration testing and security assessments help identify and fix vulnerabilities before attackers can exploit them. Companies face an increasing wave of advanced cyber threats, from zero-day exploits…
Continue reading...
In a digital era where cryptocurrencies are becoming increasingly popular, cyber attackers are intensifying their efforts to compromise unprotected users. The latest example is SparkCat, a sophisticated malware that utilizes optical character recognition (OCR) to steal recovery phrases of crypto wallets. This attack raises a crucial question for users…
Continue reading...