Cybersecurity Insights
& Security Research

Awareness

Red Team vs Blue Team vs Purple Team: Which to Choose

You have heard the terms thrown around at security conferences and in vendor pitches. Red team finds vulnerabilities. Blue team defends. Purple team does b...

• Eng. Donya Bino
• Jun 01, 2026

Read Article

Exploits

WP Maps Pro Privilege Escalation Leads to Site Takeover

A critical vulnerability has recently come to light in the WP Maps Pro WordPress plugin that is currently being actively exploited. As a result, unauthenti...

• Eng. Donya Bino
• Jun 01, 2026

Read Article

Exploits

YAMCS No Rate Limiting Allows Brute Force Attacks

YAMCS contains an exploitable security vulnerability that allows endless brute-force attempts to log into the user accounts, meaning there is no limit on t...

• Eng. Donya Bino
• Jun 01, 2026

Read Article

Exploits

Notepad++ Arbitrary Code Execution via config.xml Injection

A vulnerability was found in Notepad++ that permits attackers to execute any arbitrary code by modifying a configuration file. The vulnerability affects al...

• Eng. Donya Bino
• May 31, 2026

Read Article

Exploits

ZTE Routers Unauthenticated DoS Affects 140000 Devices

A flaw in ZTE router devices creates a vulnerability that permits unauthenticated users an ability to crash their management interface with a single, large...

• Eng. Donya Bino
• May 31, 2026

Read Article

Awareness

Protect Your Child from Deepfake Cyberbullying (Parents' Guide)

Your child comes home from school looking upset. They will not tell you why. They have been quiet all evening, and they keep staring at their phone but not...

• Eng. Donya Bino
• May 31, 2026

Read Article

Hacking

Ghost CMS SQL Injection Fuels ClickFix Attacks on 700 Sites

Threat actors took advantage of a critical SQL injection vulnerability present in Ghost CMS to insert malicious Javascript code into ClickFix campaigns lau...

• Eng. Donya Bino
• May 25, 2026

Read Article

Hacking

TrapDoor Supply Chain Attack Hits npm PyPI Cratesio

A new coordinated supply chain attack campaign has targeted three major package registries simultaneously, and the attackers are stealing developer credent...

• Eng. Donya Bino
• May 25, 2026

Read Article