Friday, November 21, 2025
Follow on LinkedIn
Home CyberSecurity Research

CyberSecurity Research

Oracle E-Business Suite Hack

Lessons from Oracle E-Business Suite Hack That Allegedly Compromises Nearly 30 Organizations Worldwide

A sophisticated cyberattack targeting Oracle E-Business Suite (EBS) customers has exposed critical vulnerabilities in enterprise resource planning systems, compromising an estimated 100 organizations worldwide...
Calendar Files Weaponized as Attack Vector

Hackers Weaponizing Calendar Files as New Attack Vector Bypassing Traditional Email Defenses

A surge in attacks exploiting iCalendar (.ics) files as a sophisticated threat vector that bypasses traditional email security defenses. These attacks leverage the trusted,...
Black Friday Scams

10 Popular Black Friday Scams – How to Detect the Red Flags and Protect...

Black Friday 2025 represents the most dangerous shopping season in cybercrime history, with fraudsters leveraging artificial intelligence, deepfake technology, and sophisticated social engineering tactics...
AI Tools Promoted by Threat Actors

List of AI Tools Promoted by Threat Actors in Underground Forums and Their Capabilities

The cybercrime landscape has undergone a dramatic transformation in 2025, with artificial intelligence emerging as a cornerstone technology for malicious actors operating in underground...

AI-Powered Ransomware Is the Emerging Threat That Could Bring Down Your Organization

The cybersecurity landscape has entered an unprecedented era of sophistication with the emergence of AI-powered ransomware attacks. Recent research from MIT Sloan and Safe...
Windows Command-line Utility PsExec

How Windows Command-line Utility PsExec Can Be Abused To Execute Malicious Code

PsExec represents one of the most contradictory tools in the cybersecurity landscape, a legitimate system administration utility that has become a cornerstone of malicious...
Cisco ASA 0-Day RCE Vulnerability

Lesson From Cisco ASA 0-Day RCE Vulnerability That Actively Exploited In The Wild

The cybersecurity landscape experienced a significant escalation in September 2025, when Cisco disclosed multiple critical zero-day vulnerabilities affecting its Adaptive Security Appliance (ASA) and...
Zero Day Vulnerabilities

Top Zero-Day Vulnerabilities Exploited in the Wild in 2025

The cybersecurity landscape in 2025 has been marked by an unprecedented surge in zero-day vulnerabilities actively exploited by threat actors. According to recent data,...
Shai-Hulud NPM Supply Chain Attack

Lessons Learned From Massive npm Supply Chain Attack Using “Shai-Hulud” Self-Replicating Malware

The JavaScript ecosystem experienced one of its most sophisticated and damaging supply chain attacks in September 2025, when a novel self-replicating worm dubbed "Shai-Hulud"...
ACR Stealer - Uncovering Attack Chains

ACR Stealer – Uncovering Attack Chains, Functionalities And IOCs

ACR Stealer represents one of the most sophisticated information-stealing malware families actively circulating in 2025, distinguished by its advanced evasion techniques and comprehensive data...
CSN

Top 10