Home About Courses Live Batches Private Sessions Labs Cyber Bulletin Verify Contact

Login
OAuth Device Code Phishing Targeting Microsoft 365

OAuth Device Code Phishing Targeting Microsoft 365

Published on: December 28, 2025

OverviewOrganizations are facing a widespread and actively exploited phishing campaign targeting Microsoft 365 (M365) environments through abuse of the OAuth 2.0 device authorization flow. Commonly known as OAuth device code phishing,...
Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability (CVE-2020-12812)

Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability (CVE-2020-12812)

Published on: December 27, 2025

Overview:Fortinet has issued a new advisory warning about active exploitation of an old vulnerability in FortiOS SSL VPN.The vulnerability allows attackers to bypass Two-Factor Authentication (2FA) under certain configurations.Although this issue was...
Malicious Chrome Extensions Stealing User Credentials

Malicious Chrome Extensions Stealing User Credentials

Published on: December 26, 2025

OverviewTwo malicious Google Chrome extensions published under the name “Phantom Shuttle” have been identified in the Chrome Web Store. These extensions masquerade as legitimate proxy and network-testing tools but secretly hijack user...
China-Aligned APT Exploiting Windows Group Policy for Malware Deployment.

China-Aligned APT Exploiting Windows Group Policy for Malware Deployment.

Published on: December 22, 2025

OverviewSecurity researchers have identified an emerging China-aligned advanced persistent threat (APT) cluster, tracked as LongNosedGoblin, actively engaging in cyber-espionage against governmental networks in Southeast Asia and Japan. The threat actor has...
Windows Admin Center Flaw CVE-2025-64669 Enables SYSTEM Privilege Escalation

Windows Admin Center Flaw CVE-2025-64669 Enables SYSTEM Privilege Escalation

Published on: December 18, 2025

OverviewA high-severity local privilege escalation vulnerability has been identified in Microsoft Windows Admin Center (WAC). Tracked as CVE-2025-64669, the issue arises from insecure directory permissions within the Windows Admin Center data...
Microsoft Outlook Remote Code Execution Vulnerability (CVE-2025-62562)

Microsoft Outlook Remote Code Execution Vulnerability (CVE-2025-62562)

Published on: December 15, 2025

Overview:Microsoft has released security updates addressing a critical remote code execution (RCE) vulnerability in Microsoft Outlook and related Microsoft Office products. The vulnerability, tracked as CVE-2025-62562, arises from a use-after-free memory...
Cloudflare Discloses Technical Details Behind Massive Outage that Breaks the Internet

Cloudflare Discloses Technical Details Behind Massive Outage that Breaks the Internet

Published on: November 21, 2025

OverviewOn November 18, 2025, Cloudflare experienced a global outage affecting a significant portion of internet services. The outage was caused by a configuration change to a ClickHouse database cluster, which...
Active Exploitation of Cisco ISE & Citrix NetScaler Zero-Days by an Advanced Threat Actor

Active Exploitation of Cisco ISE & Citrix NetScaler Zero-Days by an Advanced Threat Actor

Published on: November 14, 2025

Overview:Amazons threat intelligence team has observed an advanced persistent threat (APT) actor actively exploiting previously undisclosed zero-day vulnerabilities in:Cisco Identity Services Engine (ISE / ISE-PIC) (unauthenticated remote code execution) Citrix NetScaler ADC...
Chrome Emergency Update to Patch Multiple Remote Code Execution Vulnerabilities.

Chrome Emergency Update to Patch Multiple Remote Code Execution Vulnerabilities.

Published on: November 11, 2025

Overview:Google Chrome has released an urgent update addressing five vulnerabilities, including three of high severity that could enable remote code execution (RCE).The patched versions are:Windows: 142.0.7444.134 / 142.0.7444.135macOS: 142.0.7444.135Linux: 142.0.7444.134These flaws...
November Top Security Vulnerabilities (CVE Report)

November Top Security Vulnerabilities (CVE Report)

Published on: November 11, 2025

Top CVE's report for month of November2025November Top Vulnerabilities OverviewIn November, multiple critical and high severity vulnerabilities were disclosed, including remote code execution flaws in widely used services, authentication bypass weaknesses, privilege...