AbejaIT

Blog

Technology news, cybersecurity, AI and IT infrastructure — our articles and carefully curated industry updates.

We publish our own analysis and practical insights from AbejaIT projects, and we also aggregate and summarize valuable content from trusted industry sources. You will find updates on software, cloud, security, artificial intelligence and IT trends — written for both business decision-makers and technical teams.

02.07.2026

Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered

An international law enforcement operation, with cooperation from Bitdefender, ESET, and Microsoft, dismantled criminal infrastructure behind Amadey and StealC malware. The operation recovered 27 million stolen credentials, aiming to disrupt cybercriminal supply chains used for ransomware and financial fraud attacks. This is another example of public-private sector effectiveness against advanced digital threats.

02.07.2026

CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited

CISA warns of active exploitation of critical vulnerability CVE-2025-67038 (CVSS 9.8) in Lantronix EDS5000 devices enabling remote code execution. Federal FCEB agencies have until June 26, 2026 to deploy available fixes. Organizations using these devices should immediately verify software versions and apply vendor updates.

02.07.2026

Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access

A critical vulnerability in Cisco Catalyst SD-WAN (CVE-2026-20245, CVSS 7.8) was actively exploited by unknown attackers for at least two months before official disclosure. The flaw allows a local authenticated user to escalate privileges and execute arbitrary commands as root. Organizations using Cisco SD-WAN solutions should immediately apply available security patches.

01.07.2026

New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns

Symantec and Carbon Black researchers identified new advanced backdoor malware named Mistic (also known as MLTBackdoor), active since April 2026 and targeting insurance, education, IT, and professional services organizations. The campaign is linked to initial access broker (IAB) KongTuke, using ClickFix techniques and ModeloRAT trojan for distribution. Companies in these sectors should urgently verify threat detection mechanisms and update incident response procedures.

01.07.2026

New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis

New macOS malware named Gaslight, written in Rust, has been discovered using prompt injection to manipulate AI tools used by security analysts. The attack aims to convince AI-based systems to refuse or abort analysis of the malicious file, effectively hindering detection. This case shows cybercriminals actively adapting methods to environments where AI supports threat intelligence processes.

01.07.2026

Surviving the Mythos Era: Richard Bejtlich on the Case for NDR

Modern SOC teams have vast amounts of telemetry data, yet often cannot answer key questions during incident analysis. Richard Bejtlich argues that alert response alone is insufficient—effective investigation requires full network context provided by Network Detection and Response (NDR). In an era of increasingly complex threats, NDR is becoming not an option but a foundation of mature security strategy.

30.06.2026

ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories

The latest cybersecurity threat roundup reveals another wave of incidents united by one common denominator—neglect of basic IT security hygiene. Cases analyzed include Smart TVs exploited as proxyware nodes, a 24-year-old curl library vulnerability, and AI-assisted crime forums. Most of these attacks require no sophisticated techniques—an unpatched vulnerability or expired credentials is enough to open doors to production infrastructure.

30.06.2026

Chrome Ad Blocker with 10M+ Installs Found with Dormant Script Injection Capability

A popular Chrome ad blocker for YouTube with over 10 million installs and a Featured badge in the Chrome Web Store has been identified as a potential security threat. Analysis revealed hidden functionality enabling injection and execution of arbitrary JavaScript in the user's browser. This discovery is a serious warning for IT departments—even seemingly trusted and widely used tools can conceal dormant attack mechanisms.

30.06.2026

Prove Your PhpStorm Skills on LinkedIn With the JetBrains Integration

JetBrains has partnered with LinkedIn Connected Apps, allowing developers to display a PhpStorm proficiency badge directly on their professional profiles. The badge is based on actual tool usage, making it a credible competency signal – unlike certifications based solely on knowledge tests.

Technologies and partners we work with