HiddenGh0st, Winos and kkRAT Exploit SEO, GitHub Pages in Chinese Malware Attacks
Chinese-speaking users are the target of a search engine optimization (SEO) poisoning campaign that uses fake software sites to distribute...
Month: September 2025
Celebrating 40000 LinkedIn Followers
Celebrating 40000 LinkedIn Followers Reaching a significant milestone like 40,000 followers on LinkedIn is more than just a number—it’s a...
ShinyHunters Attack National Credit Information Center of Vietnam
ShinyHunters Attack National Credit Information Center of Vietnam Pierluigi Paganini September 14, 2025 Vietnam’s National Credit Information Center (CIC) was...
Cyber Privateers: The Return of the Hack-Back Debate
A few weeks ago, several media sources reported headlines like this one: “Google is getting ready to 'hack back' as...
Attorney Generals go after Bitcoin ATMs for supporting Fraud
On 08SEP2025, the District of Columbia's Attorney General filed a lawsuit against Athena, a "Bitcoin ATM machine" provider with 4100+...
Finding the Real Cause
This blog post was originally published on NEOX Networks; click here to read it. It’s 9:02 a.m. on a Monday.You’ve...
FBI warns of Salesforce attacks by UNC6040 and UNC6395 groups
FBI Warns of Salesforce attacks by UNC6040 and UNC6395 groups Pierluigi Paganini September 13, 2025 The U.S. FBI issued a...
HybridPetya ransomware bypasses UEFI Secure Boot echoing Petya/NotPetya
HybridPetya ransomware bypasses UEFI Secure Boot echoing Petya/NotPetya Pierluigi Paganini September 13, 2025 HybridPetya ransomware bypasses UEFI Secure Boot to...
FBI Warns of UNC6040 and UNC6395 Targeting Salesforce Platforms in Data Theft Attacks
The U.S. Federal Bureau of Investigation (FBI) has issued a flash alert to release indicators of compromise (IoCs) associated with...
Weekly Update 469
13 September 2025 So I had this idea around training a text-to-speech engine with my voice, then using that to...
Safer Conversational AI for Cybersecurity: The BIX Approach
Here’s a scenario security teams increasingly face. A user—or an attacker pretending to be one—types something like: This is how...
Introducing HybridPetya: Petya/NotPetya copycat with UEFI Secure Boot bypass
ESET Research has discovered HybridPetya, on the VirusTotal sample sharing platform. It is a copycat of the infamous Petya/NotPetya malware,...
Cisco fixes high-severity IOS XR flaws enabling image bypass and DoS
Cisco fixes high-severity IOS XR flaws enabling image bypass and DoS Pierluigi Paganini September 12, 2025 Cisco addressed multiple high-severity...
CISA Lays Out Roadmap for CVE Program’s ‘Quality Era’
Five months after the future of the CVE program was thrown in doubt, CISA this week released a roadmap that...
Randall Munroe’s XKCD ‘Dual Roomba’
via the comic artistry and dry wit of Randall Munroe, creator of XKCD Permalink The post Randall Munroe’s XKCD ‘Dual...
