Cybersecurity Insights
& Security Research

Red Teaming

Third-Party Risk Red Teaming: Attacking Through Vendors and Partners

While many organizations are placing high levels of effort into securing their own perimeter, attackers are increasingly finding new ways to bypass perimet...

• Eng. Donya Bino
• Apr 12, 2026

Read Article

Hacking

STX RAT: The .NET Backdoor Popular with Ransomware Affiliates

New malware called STX RAT was discovered as the first RAT to be able to use invisibility techniques and perform a variety of operations. This was first se...

• Eng. Donya Bino
• Apr 12, 2026

Read Article

Exploits

Unquoted Path Vulnerability in NetBT e-Fatura Service

A privilege escalation vulnerability has been identified in NetBT e-Fatura, a widely used electronic invoicing solution in Turkey. Tracked as CVE-2025-140...

• Eng. Donya Bino
• Apr 12, 2026

Read Article

Awareness

Low-Budget Anti-Fraud Techniques for SMEs and Startups

Every year fraud can lead to losses from Business Email Compromise, bogus invoices, diversion of settlements, Smishing, and internal theft of tens of thous...

• Eng. Donya Bino
• Apr 12, 2026

Read Article

Awareness

Google Rolls Out Device Bound Session Credentials in Chrome

Google has officially made available Device Bound Session Credentials (DBSC) for all Windows users using Chrome v146! This is a significant development in...

• Eng. Donya Bino
• Apr 11, 2026

Read Article

Awareness

Why Zig Is Becoming the New Favorite for Malware Developers

In 2026, malware developers are becoming interested in Zig due to its use as a modern day replacement for C as a systems programming language. Whereas legi...

• Eng. Donya Bino
• Apr 11, 2026

Read Article

Awareness

7 Red Flags That Scream “CEO Targeting” Scam

CEO-targeted scams, or Business Email Compromise (BEC) or CEO Fraud as they are more commonly referred to, are one of the top financial cyber threats of 20...

• Eng. Donya Bino
• Apr 11, 2026

Read Article

Exploits

Critical Vulnerability Found in Popular Android SDK Used by Crypto Wallets

The Microsoft Defender Security Research Team has made public a serious vulnerability in the EngageLab SDK, which is a third-party Android SDK for Push Not...

• Eng. Donya Bino
• Apr 10, 2026

Read Article