North Korean Phishing Kit Targets Crypto Users via Zoom Impersonation
North Korean actors are running sophisticated phishing campaigns impersonating Zoom and Teams. Their real target: profiling and draining crypto wallets.
Read article →
Zimbra Zero-Day: How Email Infrastructure Became a Espionage Vector
Russian state actors leveraged an unknown Zimbra flaw to intercept email and two-factor authentication codes at scale. What infrastructure operators need to know.
Read article →
Bug Bounty Economics: When Platforms Reshape Researcher Incentives
When major platforms restructure bug bounty incentives, security researchers face harder choices about where to focus effort. What does this mean for infrastructure defence.
Read article →
Email Masking and Privacy: Why Service-Level Obfuscation Isn't Enough
Email masking services promise privacy but can leak real addresses through infrastructure logging. We examine why proper privacy requires design beyond the application layer.
Read article →
GitHub as Attack Surface: How FakeGit's 7,600 Repositories Exploit Developer Trust
A massive campaign called FakeGit has weaponised GitHub repositories as a distribution channel for SmartLoader malware. Here's what happened and how to protect your build pipeline.
Read article →
NGINX Heap Buffer Overflow: Patch Your Workers Now
A critical heap buffer overflow in NGINX worker processes allows unauthenticated remote attacks. Learn what's vulnerable, how to patch, and why this matters for your infrastructure.
Read article →
