Blogs
-
Read moreTwinLoot is a Python-based malware framework that abuses Microsoft 365, Azure, SharePoint, Graph API and Teams to hide command-and-control traffic. -
Posted: August 18, 2026Views: 19Read moreA new crypto scam uses Claude Code, phone databases, phishing, and fake wallet apps to target cryptocurrency users and steal recovery phrases. -
Read moreSecurity researchers found Atlassian Rovo vulnerabilities that could expose Jira and Confluence data through prompt injection and malicious URLs. -
Posted: August 14, 2026Views: 59Read moreNew Boss Scam attacks hijack WhatsApp Web sessions using malicious files. Learn how organizations can protect finance teams and endpoints. -
Read moreHackers are abusing legitimate ManageEngine UEM/RMM tools to gain remote access. Learn how enterprises can detect unauthorized UEM installations and endpoint abuse. -
Read moreCelebrate Independence Day 2026 with NPAV and promote cybersecurity awareness, digital safety, data protection, and a safer Digital India. -
Read moreGunra ransomware affiliates are exploiting Fortinet VPN vulnerabilities to bypass MFA, steal enterprise data, move laterally, and deploy double-extortion ransomware. -
Read moreResearchers uncovered the Papyrus mobile ad fraud campaign, which uses hidden WebViews inside reading apps to generate fake clicks, scrolling, and ad engagement, impacting advertisers worldwide. -
Read moreResearchers uncovered a large ClickFix campaign using over 250 fake macOS domains and browser fingerprinting to deliver Atomic Stealer (AMOS), targeting passwords, crypto wallets, and sensitive data. -
Read moreNetProtector researchers uncovered a Japan-India Summit themed phishing campaign using malicious LNK files, PowerShell, and C2 beaconing to target diplomatic and government organizations. -
Read moreHackers are hijacking hotel Wi-Fi networks to deliver fake browser updates that install CornFlake malware, stealing passwords, browser sessions, and Microsoft 365 tokens. -
Posted: August 03, 2026Categories: Malware Alerts, Cyber Attack, Data Breach, Email And Password, Financial fraud, Fraud Protector, Mobile FraudsViews: 31Read moreMacSync malware targets macOS users through fake Claude installation guides, stealing passwords, browser sessions, cloud credentials, and cryptocurrency wallet data. -
Posted: July 31, 2026Views: 43Read moreAI-generated phishing attacks can steal browser sessions and bypass MFA without malware. Learn how AiTM attacks target session tokens and how businesses can improve security. -
Read moreA cyber attack on England’s Department for Education exposed around 607,000 records containing email addresses and phone numbers. Learn what happened and the cybersecurity risks. -
Read moreResearchers warn that a 20-year-old IPMI vulnerability could allow attackers to compromise thousands of internet-exposed data center servers through weak BMC authentication. -
Read moreHackers claim to possess a database containing 160 million Decathlon customer records. The alleged breach remains unverified, with Decathlon yet to confirm the incident. -
Posted: July 27, 2026Views: 124Read moreA suspected 1TB Bank of Baroda data leak has reportedly exposed customer records, Aadhaar details, account information, and internal banking documents online. -
Read moreRussian state-backed hackers exploited a Zimbra zero-day vulnerability to steal emails, passwords, and 2FA recovery codes from government and enterprise organizations. -
Read moreAttackers are exploiting GitHub Actions runners to target vulnerable cPanel and WHM servers, stealing credentials, cloud keys, API tokens, and sensitive configuration data. -
Read moreLaw enforcement dismantled the Kratos phishing kit used to steal Microsoft 365 sessions and bypass MFA. Learn how to protect your organization from advanced phishing attacks.
Recent Posts
