News & Announcements

Recently, cybersecurity experts discovered a new type of malware called MDifyLoader, which is used in cyberattacks targeting Ivanti Connect Secure (ICS) devices. ​ ​ Discovered between December 2024 and July 2035, this attack exploits two security vulnerabilities in the ICS to infect and spread dangerous malicious codes such as Cobalt Strike, VShell and Fscan: MDifyLoader […]

On the morning of July 20th, as part of the event Openday 2nd PTIT, consulting area of Department of Information Security It has attracted a lot of parents and students to come and learn about it. Many questions related to the discipline, career orientation, training environment as well as post-graduate employment opportunities were answered in […]

A sophisticated cyberattack operation is quietly taking place, targeting Windows operating system users directly through a multilayer chain of infection. In this campaign, Amadey malware is used as an intermediate link to deploy a series of malicious code that steals dangerous data. Notably, the attacker used public repositories on GitHub as payload distributions, thereby easily […]

A stealth attack campaign is taking place targeting Windows users, using Amadey malware as a transit point to install more data – stealing malware. The attacker has taken advantage of public repositories on GitHub as a payload dispersal station, thus overcoming most traditional web filters. The incident again sounded the alarm that legitimate platforms could […]

Recently, a new malware called Konfety was discovered by security researchers, which attracted the attention of the cybersecurity community. It is a sophisticated variant of Android malware, using sophisticated concealment tactics to avoid detection and prevention by common security tools. ​ ​ Konfety’s way of operating is not simply fraudulent advertising but can also pose […]

According to a report released by Kaspersky in mid-July 2025, a sophisticated malware campaign called GhostContainer is quietly taking place targeting Microsoft Exchange servers in government agencies and tech businesses in Asia. The campaign took advantage of existing vulnerabilities on unpatched Exchange servers to install backdoors, maintaining control of the system for long periods of […]

NVIDIA has issued an emergency alert regarding two serious flaws in the Container Toolkit and GPU Operator software. The two code-assigned vulnerabilities, CVE-2025-23266 and CV E-2O20-24267, directly affect the GPU-powered container environment, allowing attackers to escalate privileges or disrupt services. The CVE-2025-23266 breach was found to be of high severity with a CVSS v3.1 score […]

A serious security flaw was discovered in Microsoft SharePoint, allowing the verified attacker to remotely execute code by taking advantage of the WebPart processing mechanism. The problem lies in an unsafe sequential process in the system, through which the bad guys can insert malicious code into the embedded XML content in WebPart. Microsoft has released […]

A serious security flaw has been reported in Git CLI, the most widely used source code management tool in the developer community. The vulnerability, which carries the identifier CVE – 2025-48384, was rated with a CVSS score of 8.1, allowing attackers to write arbitrary files and even remotely execute code (RCE) on Linux and macOS […]

A highly sophisticated cyber espionage campaign is quietly targeting government agencies in Southeast Asia, using a completely new Windows backdoor malware called HazyBeacon. This was a previously unrecorded threat, indicating serious investment and a clear target of the attack group behind the operation. The operation was monitored by Unit 42 – the Palo Alto Networks […]

During the second quarter of 2025, network security surveillance systems recorded a spike in extremely large-scale distributed denial-of-service (DDoS) attacks called “hyper-volumetric DDosS” with peaks of up to 7.3 terabits per second (Tbps) and 4.8 billion packets per second, (Bpps) within 45 g of the network.iHere, the highest ever. While the overall number of DDoS […]

In recent days, cybersecurity experts have discovered a highly dangerous new variant of Interlock RAT – a spyware that allows hackers to remote control a victim’s computer. Notably, this new variant is written in the PHP language and uses many sophisticated tricks to trick users and bypass traditional security systems. ​ ​ The Interlock RAT […]

A serious vulnerability has been discovered in Git CLI, the most popular tool in programming circles, with the identifier CVE-2025-48384. The vulnerability carries a CVSS score of 8.1, allowing the attacker to write arbitrary files and execute remote code (RCE) on Linux and macOS systems through a specially designed repository clone operation. The CVE-2025-48384 vulnerability […]

A sophisticated cyber espionage operation is quietly targeting government agencies in Southeast Asia with a backdoor malware never recorded before on Windows, named HazyBeacon. The campaign was followed by the Palo Alto Networks group Unit 42 with the identifier CL-STA-1020, which aimed to steal confidential information related to tariff policy, trade disputes and national strategic […]

AsyncRAT, once a simple, open-source remote control tool, has now turned into a complex, malicious code ecosystem. It constantly proliferates new variants with flexible implantability, sophisticated concealment techniques and avoidance tactics that are increasingly difficult to deal with. From a project on GitHub, AsyncRAT has become a popular platform among cybercriminals, bringing both creativity and […]

A serious remote code execution (RCE) vulnerability was recently discovered in the Kafbat UI, the open source management interface for Apache Kafka. The vulnerability was assigned the code CVE – 2025-49127 and evaluated with CVSS 10.0 scores. The wiggle from JMX in dynamic configuration Kafbat UI version 1.0.0 allows users to ” dynamically” configure Kafka […]

A sophisticated phishing campaign is targeting job seekers through fake recruitment emails, using global brands such as Red Bull to gain trust and deceive recipients. These are not explicit or misspelled emails like other forms of scamming, but rather professional-looking messages that appear from seemingly trustworthy addresses. In this case, the email is sent from […]