Security News & Threat Intelligence
How are hackers using Inno Setup Installer to deliver malware in 2026?
In 2026, cybercriminals are abusing the trusted Inno Setup Windows installer to deliver multi-stage malware such as RedLine Stealer by embedding malicious scripts in legitimate-looking installers. This sophisticated t...
What is the HIKVISION ApplyCT Vulnerability and How Does it Impact Surveillance Devices?
The HIKVISION ApplyCT Vulnerability (CVE-2025-34067) is a critical remote code execution flaw in the HikCentral Integrated Security Management Platform. It allows unauthenticated attackers to execute arbitrary code re...
What are the most dangerous Active Directory misconfigurations and how can they be prevented?
This blog explores six of the most dangerous Active Directory misconfigurations—Kerberoasting, AS-REP Roasting, LLMNR Poisoning, NTLM Relay Attacks, NTDS Dumping, and Misconfigured Group Policies. Each issue is explai...
What are the Apache Tomcat and Camel vulnerabilities CVE-2025-24813, CVE-2025-27636, and CVE-2025-29891 and how are they being exploited in the wild?
In March 2026, three critical vulnerabilities—CVE-2025-24813, CVE-2025-27636, and CVE-2025-29891—were discovered in Apache Tomcat and Apache Camel, two widely used Java-based platforms. These flaws are now being activ...
What are the best anti-phishing tools for SOC analysts to use in 2026?
In 2026, phishing remains one of the top cyber threats, making it essential for SOC (Security Operations Center) analysts to use reliable anti-phishing tools. This blog explores the top 12 tools—including GoPhish, The...
Why are hackers sending PDFs that look like Microsoft or DocuSign emails asking me to call a phone number?
Cybercriminals are now using PDF attachments in phishing emails that impersonate trusted brands like Microsoft, DocuSign, PayPal, and NortonLifeLock to trick users into calling fake support numbers. This growing attac...
What are the hidden weaknesses in AI SOC tools and how can organizations protect against them?
AI-powered SOC tools are widely used to detect and respond to cyber threats, but they have hidden vulnerabilities that many security teams overlook. These include poor data quality, model drift, lack of transparency, ...
What are the Firefox extensions that steal cryptocurrency wallets and how can I avoid them?
In July 2026, over 40 malicious Firefox extensions were discovered targeting popular crypto wallet users such as MetaMask, Trust Wallet, and Coinbase. These fake add-ons mimicked real wallet tools, using the same name...
Microsoft Edge Security Update July 2025 | Chromium 0-Day CVE-2025-6554 Fixed
Microsoft has patched a critical 0-day Chromium vulnerability (CVE-2025-6554) actively exploited in the wild. Learn how Edge users can protect themselves with version 138.0.3351.65.
Adidas Korea Data Breach 2025 | Customers' Personal Information Exposed via Third-Party Vendor
Adidas confirms a 2025 data breach affecting Korean customers through a third-party support vendor. Learn what was exposed, how Adidas is responding, and what users should do next.
12-Year-Old Sudo Vulnerability CVE-2025-32462 Allows Root Access on Linux Systems
A critical 12-year-old Sudo vulnerability (CVE-2025-32462) lets attackers escalate privileges to root on Linux and macOS systems. Learn how it works, who’s affected, and how to fix it fast.
Chinese Student Caught in London for Massive Smishing Attack Using Rogue SMS Tower | July 2026
In July 2026, a Chinese student was sentenced in London for conducting a large-scale smishing campaign using an SMS blaster disguised in a black SUV. The attacker broadcast a rogue mobile signal across Greater London,...
CISA Chrome 0-Day Vulnerability (CVE-2025-6554) | Exploit Warning, Fixes, and Mitigation Guide
CISA warns of active exploitation of Chrome 0-day CVE-2025-6554 affecting the V8 JavaScript engine. Learn how attackers use malicious HTML for RCE and how to patch Chrome, Edge, Opera, and other Chromium browsers now.
YONO SBI App Vulnerability (CVE-2025-45080) Exposes Millions to Man-in-the-Middle Attacks
A critical flaw in the YONO SBI app allows attackers to intercept banking data via MITM attacks due to insecure HTTP settings. Learn how CVE-2025-45080 impacts users and how to protect your data.
Iran-Linked Hackers May Target U.S. Firms & Infrastructure in 2026 | Government Warning
U.S. agencies warn that Iranian-linked hackers may target American companies and critical infrastructure in 2026. Learn what the advisory says, past incidents, and how to secure your systems.
Kimsuky Hackers Use ClickFix Social Engineering to Deploy Malware via PowerShell | Full Analysis 2026
Discover how North Korean APT group Kimsuky exploits a psychological attack called ClickFix, tricking users into executing malware via PowerShell. Learn how it works, real attack examples, defense tips, and Indicators...
![Top 10 Famous Ethical Hackers in India [Updated 2026]](https://www.webasha.com/blog/uploads/images/202608/image_140x98_da23f65c290cfbf1237d77aec58a2f0f.jpg)
