Cybersecurity Insights
& Security Research

Hacking

APT37 Uses Facebook Pretexting to Deliver RokRAT Malware

The North Korean hacking group known as APT37 (also called ScarCruft) has been linked to a targeted social engineering campaign that uses Facebook to deliv...

• Eng. Donya Bino
• Apr 13, 2026

Read Article

Hacking

What Predator Spyware Can Steal: Messages, Photos & More

The Predator is one of the most sophisticated mercenary spyware platforms still in existence. Initially birthed as a covert monitoring solution for commerc...

• Eng. Donya Bino
• Apr 13, 2026

Read Article

Awareness

Measuring Security Culture: What Predicts Fewer Incidents

Many organizations invest heavily in security tools, training completion rates, and compliance checklists, yet these often do not lead to a reduction of ac...

• Eng. Donya Bino
• Apr 13, 2026

Read Article

Hacking

Malicious Camera Apps That Turn Your Phone into a Spy Tool

A lot of people think that their phones' cameras only turn on when they use the camera app. However, malicious apps can activate either the front or back c...

• Eng. Donya Bino
• Apr 13, 2026

Read Article

Awareness

How Attackers Discover and Exploit Shared Credentials in Cloud Environments

The use of shared credentials like AWS access keys, Azure service principal credentials, GCP service account keys and the reuse of passwords between differ...

• Eng. Donya Bino
• Apr 12, 2026

Read Article

Red Teaming

Third-Party Risk Red Teaming: Attacking Through Vendors and Partners

While many organizations are placing high levels of effort into securing their own perimeter, attackers are increasingly finding new ways to bypass perimet...

• Eng. Donya Bino
• Apr 12, 2026

Read Article

Hacking

STX RAT: The .NET Backdoor Popular with Ransomware Affiliates

New malware called STX RAT was discovered as the first RAT to be able to use invisibility techniques and perform a variety of operations. This was first se...

• Eng. Donya Bino
• Apr 12, 2026

Read Article

Exploits

Unquoted Path Vulnerability in NetBT e-Fatura Service

A privilege escalation vulnerability has been identified in NetBT e-Fatura, a widely used electronic invoicing solution in Turkey. Tracked as CVE-2025-140...

• Eng. Donya Bino
• Apr 12, 2026

Read Article