From Teen Computer Whiz To Crypto Godfather
12 Dec True Hacking Story: From Teen Computer Whiz To Crypto Godfather Posted at 09:02h in Blogs by Taylor Fox This week in cybersecurity from…
Month: December 2025
New Advanced Phishing Kits Use AI and MFA Bypass Tactics to Steal Credentials at Scale
Cybersecurity researchers have documented four new phishing kits named BlackForce, GhostFrame, InboxPrime AI, and Spiderman that are capable of facilitating credential theft at scale. BlackForce,…
Quantum risk to quantum readiness: A PQC roadmap
No one knows exactly when quantum computing will arrive, but accelerating progress is prompting security and IT leaders to recognise the potential risks. With near-weekly…
New AiTM Attack Campaign That Bypasses MFA Targeting Microsoft 365 and Okta Users
A sophisticated phishing campaign has emerged that successfully bypasses multi-factor authentication, protecting Microsoft 365 and Okta users, representing a serious threat to organizations relying on…
ImmuniWeb enhances AI vulnerability testing and compliance reporting
ImmuniWeb has unveiled a major update to its ImmuniWeb AI Platform, based on ongoing research as well as valuable feedback from customers and partners in…
NANOREMOTE Malware Leverages Google Drive API for Command-and-Control (C2) to Attack Windows Systems
A sophisticated new Windows backdoor named NANOREMOTE emerged in October 2025, presenting a significant threat to enterprise environments by leveraging legitimate cloud infrastructure for malicious…
CyberVolk Hackers Group With New VolkLocker Payloads Attacks both Linux and Windows Systems
CyberVolk, a pro-Russia hacktivist group, has reemerged with a new ransomware platform called VolkLocker following a period of dormancy in 2025. The group, first documented…
Interview: Erik Mayer, transformation chief clinical information officer, Imperial College
Managing complex responsibilities is a common task for digital leaders. However, for Erik Mayer, transformation chief clinical information officer (CCIO) at Imperial College London and…
What Schrödinger can teach us about cybersecurity
I recently had, what I thought, was a unique brainwave. (Spoiler alert: it wasn’t, but please read on!) As a marketing leader at ESET UK,…
New ConsentFix Attack Let Attackers Hijack Microsoft Accounts by Leveraging Azure CLI
A sophisticated new phishing attack technique called “ConsentFix” that combines OAuth consent phishing with ClickFix-style prompts to compromise Microsoft accounts without requiring passwords or multi-factor…
Elastic detects stealthy NANOREMOTE malware using Google Drive as C2
Elastic detects stealthy NANOREMOTE malware using Google Drive as C2 Pierluigi Paganini December 12, 2025 Elastic found a new Windows backdoor, NANOREMOTE, similar to FINALDRAFT/REF7707,…
Burp On Tour 2025: bringing the AppSec community together around the world | Blog
Amelia Coen | 12 December 2025 at 11:34 UTC In 2025, we set out with a simple mission: take Burp Suite on the road and…