Introduction The cybersecurity landscape continues to evolve rapidly, and one of the latest threats gaining attention is the Masjesu botnet—a stealthy, commercially operated DDoS-for-hire service targeting vulnerable IoT devices worldwide. First observed around 2023 and still actively evolving in 2026, Masjesu represents a new generation of botnet-as-a-service (BaaS) platforms that are both scalable and difficult
Read More
Critical Outlook RCE vulnerability — what happened On December 1, 2025, public disclosure was made for a critical remote-code execution (RCE) vulnerability in Outlook, tracked as CVE-2024-21413. According to the disclosure, a Proof-of-Concept (PoC) exploit is now available — meaning that researchers (and potentially attackers) can reproduce the exploit under lab conditions, raising the likelihood
Read More
1. Executive Summary A newly discovered and actively exploited vulnerability in the widely used Post SMTP plugin for WordPress has put an estimated 400,000+ websites at risk of full site takeover. The vulnerability is tracked as CVE‑2025‑11833 and carries a CVSS score of 9.8 (Critical). Affected plugin versions: up to and including Version 3.6.0. The
Read More
Artificial Intelligence (AI) has quickly moved from being a buzzword to becoming a cornerstone of business innovation. From financial forecasting to customer service automation, organizations are embracing AI to gain an edge. But here’s the catch: while AI opens up incredible opportunities, it also creates new risks—many of which aren’t fully understood yet. This is
Read More