AbejaIT AbejaIT
AbejaIT

Blog

Technology news, cybersecurity, AI and IT infrastructure — our articles and carefully curated industry updates.

We publish our own analysis and practical insights from AbejaIT projects, and we also aggregate and summarize valuable content from trusted industry sources. You will find updates on software, cloud, security, artificial intelligence and IT trends — written for both business decision-makers and technical teams.

Operation Endgame Cleans 14,971 WordPress Sites from SocGholish Malware

Operation Endgame Cleans 14,971 WordPress Sites from SocGholish Malware

European and North American law enforcement conducted a joint operation targeting SocGholish malware infrastructure, successfully cleaning nearly 15,000 infected WordPress sites. The action confirmed growing effectiveness of international cybercrime cooperation and dealt a serious blow to malware distribution ecosystems. For companies maintaining WordPress sites, this is a clear signal to regularly audit digital asset security.

Read more
AutoJack Attack – One Web Page Can Hijack AI Agent for Host Code Execution

AutoJack Attack – One Web Page Can Hijack AI Agent for Host Code Execution

Microsoft researchers described a new attack technique called AutoJack that hijacks a web-browsing AI agent and uses it for remote code execution on the host machine. If the agent visits a malicious web page, embedded JavaScript can communicate with a privileged local service and launch arbitrary processes without credentials or user interaction. This is a significant warning for organizations deploying agentic AI solutions: the attack surface extends far beyond traditional threat vectors.

Read more
The Gentlemen RaaS – GentleKiller Framework Targets 400+ EDR Processes

The Gentlemen RaaS – GentleKiller Framework Targets 400+ EDR Processes

The ransomware-as-a-service group The Gentlemen developed the advanced GentleKiller framework capable of neutralizing over 400 processes related to EDR and endpoint security software. The tool is provided to affiliates before deploying the actual ransomware, significantly hindering attack detection. This is another example of growing cybercrime professionalization—RaaS organizations increasingly offer ready-made, modular toolkits for bypassing defenses.

Read more
usbliter8 Exploit – Unpatchable SecureROM Flaw in Apple A12 and A13 Chips

usbliter8 Exploit – Unpatchable SecureROM Flaw in Apple A12 and A13 Chips

Paradigm Shift security researchers disclosed a working 'usbliter8' exploit enabling arbitrary code execution in the SecureROM of Apple A12 and A13 chips—permanently etched in silicon and unreachable by software updates. The flaw is local and requires physical device access, but its criticality lies in being unpatchable for the hardware's entire lifecycle. Organizations using devices based on these chips should factor this risk into asset management and physical access control policies.

Read more
Gravity SMTP WordPress Attacks – API Key Exposure Across ~100,000 Sites

Gravity SMTP WordPress Attacks – API Key Exposure Across ~100,000 Sites

Active attacks exploiting CVE-2026-4020 in the popular WordPress plugin Gravity SMTP—installed on roughly 100,000 sites—have been detected. The medium-severity vulnerability allows unauthenticated attackers to extract sensitive configuration data, API keys, and OAuth tokens. Site administrators using this plugin should immediately update to the latest patched version.

Read more
INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific

INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific

INTERPOL's latest report points to a dramatic rise in cybercrime across the Asia-Pacific region — phishing, ransomware, and AI-powered scams are becoming increasingly serious threats to businesses. Key factors driving this trend include rapid digitization, uneven cybersecurity maturity levels, and well-organized criminal networks. Organizations should urgently review their data and infrastructure protection strategies.

Read more
AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network

AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network

New malware AryStinger has already infected over 4,300 legacy home routers, converting them into a distributed proxy network for reconnaissance ahead of actual attacks. Unlike typical DDoS botnets, this malware focuses on the preparatory phase — gathering intelligence about potential targets. This is another signal for B2B companies that forgotten network infrastructure can become a component of cyberattacks against other organizations.

Read more
Canada's Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected Devices

Canada's Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected Devices

Canada's intelligence agency CSIS used a first-of-its-kind court warrant to actively neutralize two botnets controlled by foreign actors — directly on infected devices in Canada. The operation covered servers, home routers, and IoT equipment, and the federal court published the ruling on June 15. This unprecedented action demonstrates the evolution of offensive tools available to security agencies.

Read more
Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More

Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More

Another week brings another wave of cyber threats — from browser bugs and EDR-killing tools, through TV device botnets, to Android trojans and OpenBSD vulnerabilities. Most attacks exploit the same persistent weaknesses: weak credentials, suspicious browser extensions, and vulnerable WordPress sites. Solid IT security hygiene remains a more effective shield than reacting to incidents after the fact.

Read more
Technologies and partners we work with