Information Security

In recent years, the cyber threat landscape has grown increasingly complex and perilous, as novel actors emerge and existing ones evolve in sophistication and reach. One such actor is Raspberry Robin, previously a lesser-known cybercriminal group that has dramatically transformed its operations and impact. Initially infamous for employing infected USB drives to disseminate malware between 2019 and 2023, Raspberry Robin

In the rapidly evolving landscape of cybercrime, VanHelsingRaaS has emerged as a formidable ransomware-as-a-service (RaaS) program, attracting significant attention in the cybersecurity community since its launch on March 7, 2025. The program demonstrated its potency by infecting three victims within the first two weeks, with ransom demands reaching up to $500,000. Affiliates of VanHelsingRaaS are provided with an intuitive control

The UAE recently experienced a significant cyber threat, with 634 cyberattacks aimed at various government and private entities, sparking concern and immediate action. The UAE Cybersecurity Council successfully mitigated these cyber intrusions, which were part of a broader global threat targeting Oracle Cloud systems. This international cyber threat compromised around 140,000 entities globally, including approximately six million Oracle customer records

Kubernetes, a staple in container orchestration for modern IT infrastructure, faces a significant security challenge. Technology journalist Jai Vijayan has revealed four serious vulnerabilities within the Ingress NGINX Controller, posing risks to numerous Internet-facing clusters managed by large corporations, including Fortune 500 companies. As organizations increasingly rely on Kubernetes for managing applications efficiently, with its capabilities in traffic routing, load

A devastating cyberattack has recently come to light, revealing that sophisticated threat actors have stolen over 3.2 billion login credentials and compromised approximately 23 million devices worldwide. This marks one of the largest credential theft campaigns in history. Detected in March, the operation targeted various sectors including financial institutions, healthcare organizations, government agencies, and technology companies. The stolen data has

A total of five serious security flaws have been identified within the Ingress NGINX Controller for Kubernetes, potentially leading to unauthenticated remote code execution (RCE), with over 6,500 clusters susceptible on the public internet. These vulnerabilities, cataloged as CVE-2025-24513, CVE-2025-24514, CVE-2025-1097, CVE-2025-1098, and CVE-2025-1974, have been collectively named IngressNightmare. Each flaw carries a high severity rating (CVSS score of 9.8)