Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Windows malware hits 6x Mac rate, Surfshark finds
Surfshark reports Windows devices face nearly six times more malware detections than Macs, but phishing poses a greater threat to Mac users.
Lazarus Exploits Windows Zero-Day in Dream Job
North Korea's Lazarus Group used a Windows zero-day in Operation Dream Job, targeting defense pros with fake Lockheed Martin jobs to deploy backdoors.
City-Forum Campaign Targets Salesforce, ServiceNow
A data theft campaign named City-Forum has been active since March 2025, using custom tooling to target Salesforce and ServiceNow organizations across
737 Chrome VPN Extensions Route Traffic Through Proxies
Researchers found 737 free VPN/proxy extensions on Chrome Web Store that intercept browser traffic and route it through proxies, mainly targeting Russ
SBait Added to PyPI
A package named SBait has been published on PyPI, potentially containing malicious code.
WindRelay NFC malware with SpyNote steals card data
New Android malware WindRelay, used with SpyNote RAT, relays NFC card data in real time.
737 fake Chrome VPN extensions route traffic via proxy
Over 737 Chrome extensions impersonated VPN brands, routing user traffic through SOCKS5 proxies. Downloaded ~75,000 times, mainly by Russian users.
Google Blocks 7B Malicious Android Notifications Daily
Google's Chrome now blocks seven billion malicious Android notifications daily using layered defenses, limiting abusive sites and revoking permissions
Lazarus Uses Windows Zero-Day in Fake Job Attacks
North Korea's Lazarus group exploited a Windows zero-day in Operation Dream Job, targeting the defense sector with fake job offers and trojanized PDF
LiteLLM Supply Chain Attack Hits 2,500+ Orgs
LiteLLM was compromised via a Trivy hack, distributing info-stealing malware to users, impacting over 2,500 organizations.
Ready-made $500 kit puts a crypto scam within anyone’s reach
A cybercrime forum seller offers a $500 scam kit with an admin panel that tracks victims, checks crypto wallets, and inflates fake balances to maximiz
Kimwolf v7 Botnet Uses HTTP/2 to Evade DDoS Detection
Palo Alto Networks Unit 42 discovered Kimwolf v7, an Android and IoT botnet that uses HTTP/2 to make DDoS traffic look like legitimate browsing.