Schedule a Demo

Cyber Security

Cyber Security
Cyber Security

Attackers Hijacking Official GitHub Desktop Repository to Distribute Malware as Official Installer

attackers-hijacking-official-github-desktop-repository-to-distribute-malware-as-official-installer

Cybercriminals have discovered a dangerous way to trick developers into downloading malware by exploiting how GitHub works. The attack involves creating fake versions of the GitHub Desktop installer and making them appear legitimate to unsuspecting users. Between September and October 2025, this campaign primarily targeted users in Europe and the European Economic Area, though infections […]

Attackers Exploiting React2Shell Vulnerability to Attack IT Sectors

attackers-exploiting-react2shell-vulnerability-to-attack-it-sectors

Threat actors have started targeting companies in the insurance, e-commerce, and IT sectors through a critical vulnerability tracked as CVE-2025-55182, commonly known as React2Shell. This flaw exists in the Flight protocol that handles client-server communication for React Server Components, allowing attackers to run unauthorized code on vulnerable servers. The vulnerability originates from insecure deserialization, where […]

China-Aligned APTs Use PeckBirdy C&C Framework in Multi-Vector Attacks, Exploiting Stolen Certificates

china-aligned-apts-use-peckbirdy-c&c-framework-in-multi-vector-attacks,-exploiting-stolen-certificates

Since 2023, a dangerous malware framework called PeckBirdy has emerged as a primary weapon used by Chinese-aligned hacking groups. This JavaScript-based tool serves as a command-and-control platform designed to work across multiple system environments, giving attackers remarkable flexibility in how they deploy their attacks. The framework targets victims in the gambling industry and government organizations […]

Nova Ransomware Allegedly Claiming Breach of KPMG Netherlands

nova-ransomware-allegedly-claiming-breach-of-kpmg-netherlands

A major accounting firm in the Netherlands has reportedly become the latest victim of Nova, an active ransomware operation. The breach was discovered and indexed by ransomware live on January 23, 2026, with the estimated attack date coinciding with the discovery date. The attackers claim to have exfiltrated sensitive data and have issued a 10-day […]

48M Gmail, 6.5M Instagram Exposed Online From Unprotected Database

48m-gmail,-6.5m-instagram-exposed-online-from-unprotected-database

A massive database containing 149 million stolen login credentials was discovered exposed online without password protection or encryption. Posing serious security risks to users of Gmail, Instagram, Facebook, Netflix, and thousands of other platforms worldwide. The publicly accessible database contained 149,404,754 unique logins and passwords harvested through infostealer malware and keylogging software. Each record included […]

Hackers Use rn Typo Trick to Impersonate Microsoft and Marriott in New Phishing Attack

hackers-use-rn-typo-trick-to-impersonate-microsoft-and-marriott-in-new-phishing-attack

A sophisticated “homoglyph” phishing campaign targeting customers of Marriott International and Microsoft. Attackers are registering domains that replace the letter “m” with the combination “rn” (r + n), creating fake websites that look nearly identical to the real ones. This technique, known as typosquatting or a homoglyph attack, exploits the way modern fonts display text. […]

CISA Warns of Critical VMware vCenter RCE Vulnerability Now Exploited in Attacks

cisa-warns-of-critical-vmware-vcenter-rce-vulnerability-now-exploited-in-attacks

The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability affecting Broadcom’s VMware vCenter Server to its Known Exploited Vulnerabilities (KEV) catalog. This addition confirms that active exploitation of CVE-2024-37079 has been detected in the wild, posing a significant risk to enterprise environments that rely on vCenter for virtualization management. The vulnerability, originally […]

Microsoft Teams to Share your Location With Your Employer Soon Based on Wi-Fi Network

microsoft-teams-to-share-your-location-with-your-employer-soon-based-on-wi-fi-network

Microsoft is preparing to deploy a significant, potentially controversial update to Microsoft Teams that automatically detects and displays a user’s physical work location based on the Wi-Fi network they connect to. According to the latest update on the Microsoft 365 Roadmap (ID 488800), this feature is scheduled to begin rolling out in March 2026 for […]

Threat Actors Leverage SharePoint Services in Sophisticated AiTM Phishing Campaign

threat-actors-leverage-sharepoint-services-in-sophisticated-aitm-phishing-campaign

Microsoft Defender researchers have exposed a sophisticated adversary-in-the-middle (AiTM) phishing campaign targeting energy sector organizations through SharePoint file-sharing abuse. The multi-stage attack compromised multiple user accounts and evolved into widespread business email compromise (BEC) operations across several organisations. Initial Compromise Through Trusted Vendor The attack began with phishing emails sent from a compromised trusted vendor’s […]