top of page
Table of Content
EchoLeak (CVE-2025-32711): Deep Dive into the Zero-Click Copilot Prompt-Injection Vulnerability
CVE-2025-32711 (“EchoLeak”) is a critical zero click prompt injection in Microsoft 365 Copilot that could exfiltrate org secrets. Read the technical breakdown, detection rules, IR playbook and mitigation guidance.
Akshay Jain
3 min read
Inside the September 2025 npm Supply-Chain Attack
A phishing attack on a maintainer led to 18 npm packages shipping malware that hijacks browser wallet flows. Learn the timeline, IoCs of the npm supply chain attack 2025
Akshay Jain
2 min read
UNC6040 Salesforce Breach: Vishing Attack Breakdown & Defense Guide
Dive deep into the UNC6040 breach of Salesforce environments via vishing and fake Data Loader apps. Learn the attack chain, affected organizations, and proven detection and mitigation strategies.
Akshay Jain
4 min read
CVE-2025-53770 SharePoint Zero-Day: In-Depth Analysis, Detection & Defence
Explore CVE‑2025‑53770 ("ToolShell") a critical, unauthenticated RCE exploited in the wild against on-prem SharePoint. Understand how it works, real-world impact, detection rules, and remediation steps.
Akshay Jain
3 min read
Dissecting the ClickFix Campaign: Clipboard Injection and Fileless PowerShell Exploits Explained
Explore how the ClickFix campaign abuses clipboard injection and PowerShell-based fileless execution to deliver malware. Learn how SOC analysts detect, triage, and defend against this advanced threat.
Akshay Jain
3 min read
bottom of page