Author: Debolina Barik

Introduction: AWS AiTM Phishing Kit — Why It Matters A sophisticated phishing campaign targeting AWS users has revealed how attackers continue to evolve beyond traditional credential theft. The newly identified AWS AiTM Phishing Kit enables threat actors to steal AWS console credentials and multi-factor authentication (MFA) codes in real time, allowing them to hijack authenticated sessions before security tokens expire. According to Datadog Security Labs, the campaign was active between June 19 and June 23, 2026, and specifically targeted a small number of high-value AWS users, primarily software engineers and engineering leaders in the United States. Instead of simply collecting…

Introduction: Why the Mistic Backdoor Matters A newly discovered stealth malware known as the Mistic Backdoor has emerged as a significant cybersecurity concern after researchers linked it to the KongTuke initial access broker (IAB). Active since April 2026, the malware has reportedly been deployed through malicious ClickFix campaigns alongside ModeloRAT, targeting organizations across multiple industries. Unlike traditional malware, the Mistic Backdoor is designed to remain hidden by executing malicious payloads entirely in memory, making detection significantly more difficult for conventional security tools. Researchers believe the malware is primarily used to establish long-term access before selling compromised networks to ransomware operators,…

Introduction: Lantronix EDS5000 Flaw — Why It Matters The Lantronix EDS5000 Flaw has become an urgent cybersecurity concern after the U.S. Cybersecurity and Infrastructure Security Agency (CISA) confirmed that attackers are actively exploiting the vulnerability in real-world attacks. The agency has added CVE-2025-67038 to its Known Exploited Vulnerabilities (KEV) Catalog, highlighting the immediate risk to organizations using affected Lantronix EDS5000 Series devices. The Lantronix EDS5000 Flaw is a critical command injection vulnerability with a CVSS score of 9.8. Successful exploitation allows attackers to execute arbitrary commands with root privileges through the device’s HTTP Remote Procedure Call (RPC) authentication process. Because…

Introduction: Huione Cloud Seizure — Why It Matters The U.S. Department of Justice (DOJ) has announced a major enforcement action involving the Huione Cloud Seizure, targeting infrastructure allegedly used to facilitate large-scale cybercrime operations. The action comes amid growing concerns over the role of digital platforms in enabling cryptocurrency fraud, cyber scams, and money laundering activities. According to U.S. authorities, a cloud computing account linked to subsidiaries of Cambodia-based Huione Group was seized as part of efforts to disrupt criminal networks operating across cryptocurrency ecosystems. The case highlights the increasing focus of regulators and law enforcement agencies on cyber-enabled financial…

Introduction: Ubiquiti UniFi OS Vulnerability — Why It Matters The Ubiquiti UniFi OS Vulnerability has drawn urgent attention after the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added three flaws affecting UniFi OS devices to its Known Exploited Vulnerabilities (KEV) Catalog. According to CISA, the most severe issue, CVE-2026-34908, is being actively exploited in the wild. The vulnerability could allow unauthorized users to modify device configurations, potentially opening the door to broader network compromise. Organizations using UniFi gateways, controllers, and related networking products are advised to review patches immediately and apply available security updates. What Is Ubiquiti? Ubiquiti is a…

Introduction: AI Emotion Recognition Trend — Why It Matters The AI Emotion Recognition Trend has become one of the latest viral phenomena across social media platforms, with users recording themselves repeating the same phrase while expressing different emotions such as happiness, anger, sadness, sarcasm, and excitement. While the trend appears harmless and entertaining, experts interviewed by Cybernews have suggested that the AI Emotion Recognition Trend could inadvertently provide valuable training data for artificial intelligence systems. Researchers say emotional speech remains one of the most difficult areas for AI to understand accurately, making these videos potentially useful for future AI development.…

Introduction: Iran Banking Cyberattack — Why It Matters A major Iran Banking Cyberattack has disrupted card-based banking services at three of the country’s largest lenders, raising concerns about the resilience of critical financial infrastructure. According to reports, customers of Bank Melli, Bank Saderat, and Bank Tejarat experienced interruptions affecting card-related services, including ATM withdrawals, point-of-sale transactions, and mobile banking applications. The Iran Banking Cyberattack was disclosed on June 23 after Iran’s state-owned banking technology provider confirmed that cyberattacks had impacted banking operations. To contain the incident and prevent potential unauthorized access, card-related operations at the affected institutions were temporarily suspended…

Introduction: WhatsApp VBScript Campaign — Why It Matters The WhatsApp VBScript Campaign is a newly identified malware operation that uses deceptive business and financial documents to infect users through WhatsApp Desktop and WhatsApp Web. According to research published by Kaspersky, the campaign has been observed targeting users across multiple countries, including India, Brazil, Malaysia, Singapore, the United Kingdom, Australia, and several others. The WhatsApp VBScript Campaign is particularly concerning because it abuses legitimate software rather than deploying traditional malware alone. Victims who open malicious VBScript files may unknowingly install ManageEngine RMM Central, a legitimate remote management tool that can provide…

Introduction: Five Eyes AI Cyber Threat Warning — Why It Matters The Five Eyes AI Cyber Threat Warning has placed governments, enterprises, and AI developers on alert over the rapidly evolving cybersecurity implications of frontier artificial intelligence models. The warning, issued on June 22 by cybersecurity agencies from the United States, United Kingdom, Canada, Australia, and New Zealand, signals that advanced AI capabilities may significantly transform both offensive and defensive cyber operations within the near future. As governments increasingly focus on AI governance and national security, the Five Eyes AI Cyber Threat Warning is likely to influence future cybersecurity strategies…

Introduction: LACUNA Chain EDR Bypass — Why It Matters The cybersecurity community is closely examining the newly disclosed LACUNA Chain EDR Bypass framework after security researcher Mohamed Alzhrani unveiled a technique capable of defeating multiple layers of modern endpoint detection and response (EDR) monitoring. The framework reportedly exploits hidden execution gaps within Windows DLLs that are invisible to traditional stack unwinders, allowing malicious activity to evade detection mechanisms that rely heavily on call-stack analysis. The LACUNA Chain EDR Bypass disclosure has raised concerns among enterprise defenders because it reportedly works against several widely used security products and monitoring technologies. According…