A tool that needs no introduction, widely favored by threat actors and extensively scrutinized by defenders. After years of observing and analyzing real-world compromises, the time has come to produce…
The phishing-related cybercrime landscape has undergone a significant transformation with the emergence of automated kits that integrate artificial intelligence components. Among these, InboxPrime AI…
From fake bank messages urging you to "verify a payment" to calls that appear to originate from customer support, telephone spoofing exploits one of the oldest and least secure infrastructures in our…
Are you sure you've secured your IoT devices properly, or will you be among the victims featured in the next sensational article written by someone who thinks they've just discovered the existence of…
VPNs (Virtual Private Networks) are often marketed as the ultimate solution for online privacy and security. However, this narrative is misleading: while VPNs can offer some advantages, they are far…
The depths of the web, where anonymity reigns, often spark the curiosity of internet users. But beyond curiosity, there are solid reasons why one might need to navigate this world. This is especially…
Telegram has become one of the main platforms used by cybercriminals for the distribution of stolen credentials. Monitoring these channels is essential for those working in cybersecurity and threat…
What happens if an attacker manages to exploit the trust that a user (or a system) places in CoPilot to instruct a malicious behavior disguised as a legitimate function? This is precisely the goal of…
Is there anything more frightening than discovering your company's data has ended up on the Dark Web? Probably not, at least for those working in cybersecurity. Understanding the technical and…
In this article, we will explore 5 practical techniques for monitoring the Dark Web, with concrete examples of tools, small scripts, and automation pipelines. The goal is not to "browse out of…
A recent proof-of-concept called EDR-Freeze demonstrates that Windows' own Error Reporting (WER) components can be used to suspend endpoint security processes by leveraging MiniDumpWriteDump and…
The creation of malware is, in every respect, a creative process that constantly seeks new ways to bypass security systems, adapting to technological progress and change. As we have already seen in…
In the cybersecurity scenarios we usually encounter, we would hardly take into consideration SEO and Google’s search results. But if a malicious actor had the ability to remove from the search results…
Emails are today an indispensable tool, used in professional settings, in logistics, in personal communications, and even for daily bookings. However, this technology was created without any security…
The analysis of communication channels used by cybercriminals represents an important source of data. Among these, Telegram has established itself as one of the preferred platforms for threat actors…
An encrypted and decentralized communication platform like Telegram is ideal for coordination, exchanging attack tools, sharing information on zero-day vulnerabilities, and even selling stolen data.…
Browsing the dark web can arouse a lot of curiosity because of its aura of mystery and the sensitive information found there. This guide will explain how to access and browse the dark web safely,…
In the current Cyber Threat Intelligence (CTI) landscape, underground forums and the dark web continue to be key resources for identifying emerging threats, stolen data exchanges, and exploit sharing,…
“Why pay for a VPN when there are so many free ones available?” While many people choose to rely on free VPN services, driven by the promise of anonymity and security, few know the risks that lie…
Cybercriminals today use a technique called steganography to hide malware inside image files, bypassing antivirus checks and successfully targeting even experienced users.
Gen Z might be the most digitally fluent generation yet, but they’re also becoming one of the most attractive targets for cybercriminals.It’s no longer about fake bank emails or Nigerian princes; it’s…
EchoLeak is the first zero-click vulnerability identified in an AI agent as Copilot. It leverages an advanced technique called LLM Scope Violation, allowing an attacker to extract confidential data…
Several recent studies have highlighted how attackers are exploiting the growing interest in AI-generated content to deliver sophisticated malware through fake AI video platforms, as demonstrated by…
Cyber scams are no longer the work of lone, amateur criminals, but of real, organized operations distributed on an international scale. We delve into the so-called “Scam Cities” of one of the most…
The malware market is growing, with offerings that are increasingly accessible even to those with minimal skills. Some even operate as subscription-based services. Here are the best-selling ones and…
An analysis shows that malicious files, such as compressed Python files, can be executed without warnings on the desktop version of WhatsApp, representing a serious vulnerability.
If you want to reclaim your digital space in a world where “free” means being the product, Mastodon is one of the few platforms that aligns with the principles of privacy, transparency, and freedom.
Subdomain Takeover attacks are one of the most effective techniques used by hackers to compromise corporate domains. A forgotten DNS record is all it takes to turn a simple mistake into a security…
DDoS attacks are on the rise thanks to DDoS-for-hire services available on the dark web and Telegram. These attacks use botnets to overwhelm services and can target any device connected to the…
Our selection of the best 5 OSINT sources that provide valuable data for analysts and blue teamers to strengthen defenses and monitor ongoing phishing attacks.
Volatility in Digital Forensics: how to use the framework to analyze memory dumps from Windows systems, perform forensic RAM analysis, and examine active connections, running processes, registry keys,…
A list of the top 10 Open Source Intelligence (OSINT) tools for cybersecurity. Let’s explore the essential tools for collecting and analyzing OSINT data in intelligence activities, aimed at…
