CIL Security Advisory

Reynolds Ransomware: Disables Security Before Encrypting Data

Reynolds is a ransomware threat identified in early 2026. Its key capability is disabling security tools before encrypting files.

Living off the Land (LotL) Attacks

Living off the Land (LotL) attacks occur when threat actors misuse legitimate tools already present within a system to perform…

IDOR Vulnerability: A Digit Between Privacy and Exposure

Insecure Direct Object Reference (IDOR) occurs when an application uses a "direct reference" to an internal object (like a database…

TOAD Attacks: Weaponising Legitimate Zoom Infrastructure

Imagine receiving a meeting invitation from a legitimate @zoom.us email address that turns out to be a phishing invitation. This…

Phishing Alert: Are Your Employees Ready for the Most Common Attack?

Phishing remains the #1 cyberattack method worldwide. Criminals impersonate trusted brands, colleagues, or executives to trick employees into clicking malicious…

Distributed Denial of Service (DDoS): When Traffic Becomes a Weapon

A Distributed Denial of Service (DDoS) attack is a direct assault on availability, designed to overwhelm a target’s resources—bandwidth, processing…

Cloud-less IoT Devices Targeted via Anonymising Networks

Cloud-independent IoT devices, managed locally without vendor cloud services, are often marketed as more private and resilient. In reality, they…

Understanding Your Digital Weak Spots: Where Are You Most Vulnerable?

In today’s hyper‑connected world, our digital footprint is expanding rapidly—and so are the risks. Traditional defenses are no longer enough,…

Fortifying Your Google Password Manager

Your Google Password Manager is a powerful tool for convenience and security, but its strength is entirely dependent on the…