Europe has inaugurated its proprietary mechanism for monitoring software vulnerabilities: the Global CVE Allocation System (GCVE). With the launch of this nascent platform, the European Union has responded to burgeoning anxieties regarding the potential...
A.I.G (AI-Infra-Guard) integrates capabilities such as AI infra vulnerability scan, MCP Server risk scan, and Jailbreak Evaluation, aiming to provide users with the most comprehensive, intelligent, and user-friendly solution for AI security risk self-examination. Core...
YAMAGoya (Yet Another Memory Analyzer for malware detection and Guarding Operations with YARA and Sigma) is a C# application that leverages Event Tracing for Windows (ETW) to capture real-time system events. It applies detection rules written in...
In recent weeks, personnel within Afghan governmental institutions have become the recipients of missives harboring documents that ostensibly mirror official decrees from the Prime Minister’s Office. Within these communications lies a persuasive document composed...
Software developers remain a paramount objective for cyber-adversaries, as burgeoning malicious campaigns increasingly exploit the very instruments and environments foundational to the software development lifecycle. A poignant illustration of this trend is the emergence...
A novel strain of deleterious software, designated as PDFSider, was recently unearthed within the network of a Fortune 100 financial institution. The discovery transpired during a rigorous incident response effort linked to a nascent...
Critical vulnerabilities have been unearthed within Xiaomi’s Redmi Buds wireless earphone lineage, potentially facilitating the exfiltration of telephonic metadata and the systemic destabilization of the hardware. The flaw encompasses a spectrum of models spanning...
Luxshare, the Chinese industrial titan responsible for assembling Apple’s most sophisticated hardware—ranging from the iPhone and AirPods to the Apple Watch and the Vision Pro headset—has purportedly succumbed to a monumental cyber-assault. The extortionist...
It all commenced with a solitary WhatsApp missive. Nariman Gharib, a UK-based Iranian activist, received a link ostensibly inviting him to a virtual meeting; sensing a ruse, he resolved to alert his peers. The...
The South Korean threat collective APT-C-06, more infamously recognized as DarkHotel, has reasserted its presence through a sequence of incursions identified in the latter half of 2025. Following their operational surge in June—which favored...