Business Customer Reports
Experienced any inconvenience?
Let us know right away.
Resources
All official content published by AI SPERA is gathered in one place. From product updates to reports and case studies, you can explore it all here.
October 21, 2025
Tracing the Hidden Servers of “Hades Cafe”: Site Exploited as a Criminal Channel in Cambodia
Recently, multiple reports in South Korea have exposed a series of kidnapping and detention cases in Cambodia disguised as “high-paying job offers.” Several media investigations revealed websites operated by Cambodia-based criminal organizations that facilitate illegal job…
October 16, 2025
[Urgent] SonicWall Cloud Backup Breach: Full Firewall Configs Stolen; Immediate Checks Needed for 390K+ Firewalls
SonicWall has confirmed that firewall configuration data for all customers using its cloud backup service was exfiltrated by threat actors.Contrary to its initial statement that “only some users were affected,” SonicWall now acknowledges that attackers stole the firewall…
![[Urgent] SonicWall Cloud Backup Breach: Full Firewall Configs Stolen; Immediate Checks Needed for 390K+ Firewalls](/_next/image?url=https%3A%2F%2Fi0.wp.com%2Fblog.criminalip.io%2Fwp-content%2Fuploads%2F2025%2F10%2Fcybersecurity_report_251015_eng.png%3Ffit%3D1096%252C620%26ssl%3D1&w=3840&q=75)
October 14, 2025
Urgent: 3,894 SonicWall SSL VPNs Vulnerable to OVERSTEP and MFA Bypass
Multiple hacking groups have been repeatedly using SonicWall SSL VPN devices as an intrusion vector, and the security community continues to report cases where accounts protected by OTP-based multi-factor authentication (MFA) were nonetheless logged into successfully — raising…
October 7, 2025
Cisco ASA Zero-Day: 90,000 FTD Devices Exposed, Threat Hunting Guide (CVE-2025-20333 · CVE-2025-20362)
On September 25, 2025, Cisco warned that it had discovered two zero-day vulnerabilities in Cisco ASA (Adaptive Security Appliance) that are being exploited in the wild. In this post, we examine the threats and impacts of CVE-2025-20333 and CVE-2025-20362, and discuss recommended…
October 2, 2025
AI SPERA Achieves PCI DSS 4.0.1 Top Rating(Level 1) for 3rd Year
AI SPERA’s cyber threat intelligence search engine, Criminal IP, has successfully obtained the PCI DSS v4.0.1 (Payment Card Industry Data Security Standard) certification. This achievement marks the third consecutive year the platform has earned the highest rating (Level 1),…
October 1, 2025
Illegal Webtoon Sites Evading Blocks with Domain Swaps — How to Detect Fraudulent Sites
In South Korea, illegal webtoon platforms like Blacktoon have become notorious for causing both copyright infringement and financial harm.Whenever authorities block access to these sites, operators immediately register new domains—often by simply changing a number in the domain…
September 18, 2025
How Criminal IP is Securing the Expanding Attack Surface — Before It’s Too Late
In today’s fast-moving cyber threat landscape, traditional defenses are no longer enough.AI SPERA’s Criminal IP, developed out of Korea University’s Hacking Response Research Center, provides a new approach—rooted in the attacker’s perspective.By combining automation, anomaly…
September 17, 2025
Telegram QR Phishing Threat – Account Takeover with a Single Scan
Telegram QR code phishing has recently been spreading rapidly, emerging as a significant cybersecurity threat. While Telegram is recognized for its strong security and privacy features, attackers are now exploiting its QR login functionality to compromise user accounts. With…
September 16, 2025
CVE-2017-10271: Oracle WebLogic Server Vulnerability
On August 14, 2025, Lotte Card’s online payment server in South Korea was compromised, leading to large-scale data exfiltration attempts. The attack persisted for two days, with signs that at least 1.7GB of internal data was about to be extracted. The critical issue was delayed…
September 5, 2025
Exploring Threat Infrastructures Detected by Security Professionals Through Criminal IP’s Top 10 Keywords
The Criminal IP search engine, used in over 180 countries worldwide, collects a vast amount of search data every day.What are the most common keywords entered by security professionals? In this post, we highlight four of the Top 10 Criminal IP keywords as of August 2025,…
September 5, 2025
[Criminal IP v1.87.0] 2025-09-04 Release Note
An update and maintenance to Criminal IP v1.87.0 has been released. [Criminal IP v1.87.0] Regular Maintenance and Update Release Note Maintenance and Update Period: 2025.09.04 05:00~10:00 AM (UTC) [New Changes] Criminal IP Pricing Plan Restructuring As previously announced, the…
![[Criminal IP v1.87.0] 2025-09-04 Release Note](/_next/image?url=https%3A%2F%2Fi0.wp.com%2Fblog.criminalip.io%2Fwp-content%2Fuploads%2F2025%2F09%2F%25EB%25A6%25B4%25EB%25A6%25AC%25EC%25A6%2588_1870_ko_eng.png%3Ffit%3D1096%252C620%26ssl%3D1&w=3840&q=75)
September 1, 2025
N-central Zero-Day Attack — How Safe Is Your Server?
Two critical security vulnerabilities (CVE-2025-8875, CVE-2025-8876) recently discovered in N-able’s N-central platform are being actively exploited, posing severe risks to Managed Service Providers (MSPs) and IT departments worldwide. N-central is a Remote Monitoring and…
Join AI SPERA
Be part of the AI SPERA journey.
