News and Analysis

Microsoft has alerted users to CVE-2025-21396, a critical authentication bypass vulnerability that allows attackers to spoof credentials and access Microsoft accounts. Experts recommend applying updates

Researchers have identified a sophisticated malware campaign utilizing ValleyRAT, a Remote Access Trojan associated with the Silver Fox APT group. Targeting finance and accounting roles,

AsyncRAT is a sophisticated remote access trojan that uses phishing emails and legitimate infrastructure for stealthy malware delivery. Attackers exploit a sequence involving a .URL

A proof-of-concept exploit for the critical Active Directory vulnerability CVE-2025-21293, discovered in September 2024, allows low-privilege attackers to escalate to SYSTEM-level privileges. It exploits excessive