LANDFALL: Samsung Zero-Day Exploit
In targeted attacks across the Middle East, attackers weaponized a now-patched Samsung image-codec zero-day (CVE-2025-21042) to deliver a modular Android spyware family dubbed LANDFALL. The
Qilin Ransomware Hybrid Attack
SummaryIn late-2025 researchers observed the Qilin ransomware operation progressively adopting hybrid, cross-platform attack techniques that allow affiliates to run Linux-based encryptors against predominantly Windows environments
CVE-2025-55752: Apache Tomcat Path Traversal Vulnerability
Vulnerable Version Tomcat 11.0.0-M1 through 11.0.10Tomcat 10.1.0-M1 through 10.1.44Tomcat 9.0.0-M11 through 9.0.108Some EOL builds may also be impacted Fixed Version Tomcat 11.0.11 and aboveTomcat 10.1.45
Information Security Management for Govt Organizations
Introduction In an era where data has become the new oil, the protection of information assets is no longer optional—it’s a strategic necessity. Government organizations,
Information Security Practices for Govt Entities
Introduction In this age of fast digital transformation, government services are becoming increasingly reliant on secure IT systems. Cyber dangers including ransomware, phishing, and state-sponsored
Framework for Building Effective BOMs: SBOM to HBOM
Introduction In an increasingly interconnected digital ecosystem, the complexity of supply chains—spanning software, hardware, cryptography, quantum computing, and artificial intelligence—has created new layers of cybersecurity
MSME Cybersecurity: 15 Key Defense Measures
In today’s digital age, MSME cybersecurity is crucial in India. It helps protect critical infrastructure, confidential data, and ensures compliance with legal requirements. Implementing strong
WASA Audits : Ensuring ABDM Compliance
ABDM WASA Audit Compliance has become a crucial requirement for healthcare applications in India, ensuring they meet the security and interoperability standards set by the
VMware Zero-Day CVE-2025-41244 Exploited Since 2024: Local Privilege Escalation Under Attack
Overview A local privilege-escalation problem known as CVE-2025-41244 has been exploited in the wild since mid-October 2024, allegedly by a China-linked entity known as UNC5174.
Oracle E-Business Suite Zero-Day Attack (CVE-2025-61882)
Overview An ongoing mass exploitation campaign targeting Oracle E-Business Suite (EBS) deployments has been discovered by CrowdStrike researchers using a hitherto unidentified vulnerability, now known