News & Announcements

A security flaw has been announced in the well-known authentication modules Pluggable Authentication Modules (Linux-PAM). Codenamed CVE-2025-8941, this vulnerability gives users local access that can be exploited to take full control of the system through a series of sophisticated techniques such as Symbolic Link Attack and Disputes Conditions. ​ While remote mining is not possible, […]

In the digital era, cybersecurity has ceased to be the task of technical experts alone but has become a national strategic issue, tied to the safety of data, systems, and people […]. In that spirit, the Cyber Security Student Contest 2025, chaired by the National Cybersecurity Association (NCA ), under the auspices of the Ministry […]

In recent months, cyber security has uncovered a new group of hackers, Mysterious Elephant, which is being evaluated as a formidable threat in the Asia – Pacific region. ​ According to the team, the group has continuously developed its attack tools from 2023 to the present, focusing on government agencies and diplomatic organizations with the […]

Blockchain has been hailed as a decentralized, transparent technology, but in the hands of hackers it has become the perfect tool to hide malicious code. Recently, the hacker group UNC5142 was found to be using the smart contract on the BNB Smart Chain to spread malicious code that stole user information, including: Atomic Stealer, Lumma, […]

In the context of strong digital transformation businesses, many legacy technology systems such as Samba (a file-sharing tool common on Linux/Unix) are still quietly operating within the intranets of thousands of organizations worldwide. However, these seemingly “benign” tools can become the gate to dangerous exploitation if not updated regularly. ​ The Samba Team issued security […]

A group of hackers believed to be associated with China, Jewelbug, had been quietly infiltrating the internal network of an IT service provider in Russia for five months, specifically from January to May 2025. The incident marked Jewelbug’s notable expansion into Russia, following the previous series of attacks in Southeast Asia and South America. Jewelbug […]

Trend Micro researchers have recently uncovered a sophisticated attack campaign called Operation Zero Disco, which took advantage of a serious flaw in Cisco’s Simple Network Management Protocol (SNMP) mechanism to hijack network devices and install rootkits on the Linux platform. The campaign mainly targets older switches, where the attacker can set up a permanent backdoor […]

Cyber security researchers have announced two serious flaws in the Red Lion Sixnet RTU remote control devices – a product line widely deployed in industrial automation systems. Both vulnerabilities, designated CVE-2023-40151 and CVC-22770, scored a maximum score of 10.0 on the CVSS scale, allowing the attacker to hijack the device with the highest privileges. According […]

In the face of increasingly sophisticated online scams, awareness raising and self-protection skills in cyberspace have become an urgent requirement for every citizen. In order to promote public awareness and develop safe behaviors in the digital environment, the Department of Cybersecurity and Hi – tech Crime Prevention and Control (A05) – Ministry of Public Security, […]

SAP has announced a security patch in October 2025, which overcomes a total of 13 new vulnerabilities and 3 updates in its many corporate products. Central to this patch was the severe vulnerability CVE – 2025-42944 in the SAP NetWeaver AS Java platform, which was rated an absolute score of 10.0, allowing remote code execution […]

Microsoft has released a recurring security update, the October Patch Tuesday, with 172 security vulnerabilities patched, including six zero-day vulnerabilities actively exploited by hackers. This was also a special milestone as Windows 10 officially ended its free support life, making this patch the “last shield” for this popular operating system if users did not register […]

Veeam, the business backup platform likened to a “data lifeline”, has released emergency patches for three serious security vulnerabilities, including two remote code execution (RCE) vulnerabilities that scored near absolute CVSS of 9.9. These vulnerabilities directly affect Veeam Backup & Replication, a tool used by thousands of organizations worldwide to protect critical data in information […]

The hackers group Scattered Lapsus$ Hunters have claimed responsibility for the theft of over 1 billion data records from Salesforce systems globally. This is one of the most serious attacks targeting the cloud computing platform of enterprises, which has caused particular concern among cybersecurity. According to experts, the campaign began when many businesses discovered unusual […]

The Scattered Lapsus $Hunts (sometimes abbreviated SLSH or using related aliases such as “SP1D3R Hunters”) is a relatively new “cybercrime alliance”. They are formed by three prominent hacker groups: Scatter Spider, LAPSUS and ShinyHunters. ​ Prior to the “merger,” each of these groups had operated separately with data theft or blackmail campaigns. Scattered Spider: Emerging […]

Amid the official “retirement” of Internet Explorer (IE), a new sophisticated cyberattack campaign suddenly exploited the very IE Mode feature in Microsoft Edge, which was created to help users access older websites. ​ This sophisticated campaign appeared in August 2025 taking advantage of the Internet Explorer (IE) mode feature in Microsoft Edge. Essentially, the attacker […]

A large – scale data leak campaign has resulted in the information of tens of millions of customers from more than 40 organizations being made public. The culprit is the Scattered LAPSUS $Hunts, a hacker alliance that targets corporate platforms. They exploit tokens, authorizations, and third party applications in the Salesforce system to take data, […]

A cybersecurity researcher named Two Seven One Three has just announced a new technique that allows bad guys to inject malware directly into a virus-killing software process, turning the same protected processes into backdoors. ​ Anti-virus (AV) software is designed to be “uninvulnerable” as it runs with system permissions (SYSTEM) and has a self – […]