Edwin Kwan
  • Home
  • Speaker
  • Podcasts
    • Cyber Bites
    • AppSec Unlocked
    • It’s 5:05 Podcast
  • Journal
  • Publications
Select Page

Cybercriminals Launch Sophisticated ‘Ramp and Dump’ Schemes Targeting Brokerage Accounts Through Mobile Phishing

Aug 20, 2025 | Podcast

https://krebsonsecurity.com/2025/08/mobile-phishers-target-brokerage-accounts-in-ramp-and-dump-cashout-scheme Cybercriminal groups specializing in mobile phishing attacks have shifted their focus to targeting customers of major brokerage platforms, implementing a...

New HTTP/2 ‘MadeYouReset’ Attack Bypasses Security Limits to Enable Massive DoS Campaigns

Aug 19, 2025 | Podcast

https://deepness-lab.org/publications/madeyoureset/ Security researchers have discovered a critical new HTTP/2 vulnerability called MadeYouReset that enables attackers to bypass standard server connection limits and launch devastating denial-of-service attacks against...

Security Researchers Demonstrate Devastating Gemini Attacks Through Simple Google Calendar Invites

Aug 18, 2025 | Podcast

Invitation Is All You Need: Invoking Gemini for Workspace Agents with a Simple Google Calendar Invite Security researchers from SafeBreach Labs have unveiled a sophisticated new attack vector called “Targeted Promptware” that enables attackers to remotely...

Over 29,000 Exchange Servers Remain Vulnerable to Critical Flaw Despite Federal Emergency Directive

Aug 15, 2025 | Podcast

https://www.cisa.gov/news-events/directives/ed-25-02-mitigate-microsoft-exchange-vulnerability Security monitoring platform Shadowserver has identified more than 29,000 Microsoft Exchange servers that remain unpatched against a high-severity vulnerability that could...

WinRAR Zero-Day Vulnerability Under Active Exploitation Prompts Emergency Security Update

Aug 14, 2025 | Podcast

https://www.welivesecurity.com/en/eset-research/update-winrar-tools-now-romcom-and-others-exploiting-zero-day-vulnerability WinRAR developers have released an urgent security update to address an actively exploited zero-day vulnerability that allows attackers to...

University of Western Australia Forces All Staff and Students to Reset Passwords After Security Breach

Aug 13, 2025 | Podcast

https://www.abc.net.au/news/2025-08-11/university-of-western-australia-uwa-suffers-major-data-breach/105636074 The University of Western Australia has locked all staff and students out of university systems and mandated password resets following the detection of...
« Older Entries
Next Entries »

Latest Posts

  • HackerOne Slashes Bug Bounty Payouts as AI Floods Open-Source Security Programs
  • CISA Credentials Exposed in Public GitHub Repository for Six Months Before Takedown
  • Google Accidentally Exposes Details of Unpatched Chromium Vulnerability
  • GitHub Confirms Internal Repository Breach After Employee Device Compromise
  • Grafana Labs Confirms Ransomware Extortion Following TanStack Supply Chain Breach

Speaking Events

  • Guest Lecture at UNSW Business School for INFS5907
  • Speaker at Bugcrowd Luncheon
  • Guest Lecture at UNSW
  • Panelist at SecTalks Legends – 2025
  • Keynote Speaker at Sydney AI Security Summit 2025

More Content

  • Articles (26)
  • Podcast (792)
  • Posts (26)
  • Publications (1)
  • Speaking (50)
  • X
  • RSS
Edwin Kwan