Reza Rafati
-

Cisco RCE Vulnerability Affects Security Appliances
Cisco has identified a critical RCE vulnerability, CVE-2024-20353, affecting its Secure Web Appliance and Secure Email Gateway products. Immediate updates are urged.
-

Cisco Firepower Firewalls: Next-Gen Protection and Critical Vulnerabilities
This article examines Cisco Firepower Firewalls, detailing their next-generation protection capabilities and critical vulnerabilities. It highlights the importance of timely updates as warned by CISA for effective cybersecurity.
-

What is Rhadamanthys Infostealer?
Rhadamanthys Infostealer compromises digital security by illicitly acquiring sensitive user data. This sophisticated malicious software operates as a Malware-as-a-Service (MaaS), posing a significant threat to individuals and organizations. It facilitates widespread credential theft and financial exploitation. This report examines Rhadamanthys’ operational mechanisms, its propagation methods, and the broader implications of its activities, including recent efforts…
-

What is CitrixBleed 2 (CVE-2025-5777)?
CitrixBleed 2 (CVE-2025-5777) is a critical information-disclosure vulnerability impacting NetScaler ADC and Gateway systems, allowing unauthorized attackers to bypass MFA, hijack admin sessions, and establish unauthorized VDE sessions. This zero-day was exploited by an unnamed APT group before a patch was released.
-

Global Fraud Rings Explained
Global fraud rings are highly organized, transnational criminal enterprises that use intricate networks and sophisticated tactics to illicitly acquire money, assets, or sensitive information from individuals, corporations, and national economies across international borders.
-

Canada Imposes New Sanctions on Russian Drone and Energy Production
Canada has imposed new sanctions on Russia, targeting its drone and energy industries, and infrastructure implicated in cyberattacks against Ukraine. These measures escalate economic pressure aimed at curbing Russia’s ongoing conflict.
-

Russia’s Finance Ministry to Debut Yuan Bonds in December
Russia’s Finance Ministry will issue its first series of government bonds denominated in Chinese yuan next month, diversifying its borrowing portfolio and mitigating Western sanctions amid declining traditional revenue streams and a projected budget deficit.
-

European Union Weighs New Intelligence Unit Under Von der Leyen
The European Union is considering a new intelligence unit directly under Commission President Ursula von der Leyen to enhance national intelligence coordination and strengthen its global geopolitical standing.
-

Elder Fraud: AI Voices and Public Data Drive Billions in Losses, Highlighting Cybersecurity Gaps
Sophisticated fraud schemes, increasingly driven by AI-generated voices and readily available personal data, cost elderly Americans unprecedented financial losses. These attacks highlight critical vulnerabilities in human-centered cybersecurity defenses.
-

Maverick Banking Malware Spreads Via WhatsApp, Targets Brazilian Banks
Maverick, a new banking malware similar to Coyote, is spreading via WhatsApp, targeting Brazilian banks. It uses malicious ZIP files disguised as invoices, leading to fileless infection and WhatsApp account hijacking. The malware steals banking credentials by monitoring URLs and injecting fake forms. This persistent threat highlights the need for regular updates and caution with…
