SetupHijack is a security research tool that exploits race conditions and insecure file handling in Windows installer and update processes. It targets scenarios where privileged installers or updaters drop files in %TEMP% or other world-writable locations, allowing...
Dubai has seen a surge in fraud schemes involving fake job offers and visa arrangements. Local police warn that criminals are actively using forged employment guarantees and fictitious sponsorship documents to deceive victims. Under...
More than two million infected devices worldwide—this is the scale of the new botnet known as Kimwolf, according to an assessment published by Synthient. The countries reporting the highest number of infections include Vietnam,...
Artificial intelligence, now an indispensable assistant in business, is increasingly being viewed as a potential source of internal threats. According to Wendy Whitmore, head of security research at Palo Alto Networks, autonomous AI agents...
DbgNexum is a Proof-of-Concept for injecting shellcode using the Windows Debugging API and Shared Memory (File Mapping). It avoids writing and reading remote memory directly, instead using context manipulation to force the target process to...
Microsoft has definitively abandoned phone-based activation for Windows and Office. Although the company still references this method in its support documentation, in practice it no longer functions. Users attempting to activate products without an...
The hacking group known as ShinyHunters has claimed responsibility for breaching the infrastructure of Resecurity and exfiltrating internal data. Resecurity, however, maintains that the attackers gained access only to a deliberately constructed decoy—a segregated...
The hacking group known as Patchwork—also referred to as Dropping Elephant and Maha Grass—has once again come under scrutiny following a series of targeted attacks against Pakistan’s defense institutions. In its latest campaign, the...
A hacking group operating under the name DarkSpectre has, for seven years, systematically infected the computers of users running Chrome, Edge, and Firefox browsers. According to Koi Security, more than 8.8 million unique devices...
The hacking group known as Transparent Tribe has launched a new wave of cyber-espionage operations targeting government bodies, research institutions, and strategically important organizations in India. The attackers’ primary weapon is yet another variant...
A large-scale supply chain compromise known as Shai-Hulud has been linked to the recent theft of approximately USD 8.5 million in cryptocurrency from more than 2,500 Trust Wallet accounts. The company’s team has concluded...
Hong Kong banks have devised a radical way to undercut fraudsters: a portion of funds can be placed in a special account from which withdrawals or transfers are possible only in person, after a...
