Cybersecurity
-
PHP2Shell: How an AI Found Two Decade-Old Flaws That Shook Most of the Web
Two critical, decade-old PHP vulnerabilities — found by an AI, not a human researcher —…
-
The Fake IT Helpdesk Is Calling You on Teams — And It’s Working
Multiple unrelated threat groups have converged on the same playbook this year: spam an inbox,…
-
GigaWiper: The Backdoor That Poses as Ransomware — Then Wipes Your Disk for Good
Microsoft has detailed GigaWiper, a Go-based Windows backdoor that merges a raw disk wiper, fake…
-
Claude Code Proxy Detection: Separating Facts from Speculation
Claude Code versions 2.1.193 through 2.1.196 used Unicode steganography to encode China proxy detection signals…
-
How Ransomware Encrypts Your Files: A Technical Deep Dive
Ransomware uses a hybrid AES-256 + RSA-4096 encryption scheme that’s mathematically unbreakable without the attacker’s…
-
ClickFix on macOS: How Hackers Trick You Into Infecting Your Own Mac
ClickFix is the social engineering technique that bypasses Gatekeeper entirely by tricking macOS users into…
-
LOLBAS: How Hackers Use Windows’ Own Tools Against You
Attackers don’t always bring their own tools. certutil, mshta, regsvr32, wmic — Microsoft-signed binaries already…
-
Dissecting a Phishing Email: What the Headers Actually Tell You
The From field in a phishing email is trivially spoofed. The real story is in…
-
North Korea’s Secret Army: How DPRK IT Workers Infiltrated 300+ US Companies
North Korean government operatives are posing as remote IT workers inside Western companies, funnelling salaries…
-
Windows Event Log IDs Every Blue Teamer Should Know
There are hundreds of Windows Event IDs but you really only need about 30 of…
About Author
Subhash Thapa
Security Analyst (SOC, AI, MDR & IR) | CEH | CCSP | CCIO | CSFPC
Latest Posts
Weekly threat intel, straight to your inbox
Free. No noise. Unsubscribe anytime.