Vulnerable U

CISA Warns of RESURGE Malware Targeting Ivanti Appliances

The Phishing Pages That Could Get You Killed

A phishing operation tied to Russian intelligence mimics Ukrainian paramilitary recruitment pages to unmask citizens opposing the war. Search engines helped rank the fakes — exposing users to surveillance, arrest, or worse.

Researchers Hack Source Code from Google Gemini

Security researchers found a way to exfiltrate internal binaries and proto files from Google Gemini's Python sandbox—without breaking out of it.

Russian Hackers Target Ukraine With Stealthy Malware Attack

A Russia-backed campaign is using deceptive documents to hack Ukraine-linked targets. Here's how the malware works and what defenders should watch for.

Massive Phishing Campaign Targeting Ukraine Defense Contractors

Nearly 900 spoofed domains impersonate defense and aerospace firms supporting Ukraine. Credential theft and malware delivery linked to large phishing ops.

How Russian Disinformation Campaigns Exploit Domain Registrars

Russia is abusing domain registrars to run global disinformation campaigns. Learn how spoofed infrastructure enables phishing, propaganda, and evasion.

Stealthy WordPress Malware Exploits Mu-Plugins Directory

Attackers are hiding malware in WordPress mu-plugins, bypassing detection and gaining persistent access. Learn how it works and how to secure your site.

🎓️ Vulnerable U | #109

SignalGate, Next.js auth vuln, Kubernetes major RCE bug, Chinese shell companies hiring laid off gov employees, and much more!

Chrome Zero Day CVE-2025-2783 Used in Targeted Attacks

Critical Bugs In Ingress-NGINX Allow Kubernetes Cluster Takeover

Critical Next.js CVE-2025-29927 Flaw Disclosed

🎓️ Vulnerable U | #108

More CISA DOGE drama, US softening on Russia cyber defenses, 60M malware app downloads from Google Play Store, Massive Github supply chain hack, and much more!