How I pushed myself to six flags by Day 3, hit dead ends, wasted over 12 hours, restarted environments, and eventually reached all 12 flags…

This is the challenge where I achieved second blood: XSS → SSRF → RCE

Samsung Foundry reached 60-70% 4nm yield, securing a $100M order for OPU chips from US AI startup Tsavorite, signaling recovery in high-end chip production.

Code for "search ads" was found in a ChatGPT Android build. OpenAI officially denied current testing, but high operational costs keep advertising speculation alive.

A previously undetectable Linux backdoor called GhostPenguin was exposed by AI-driven threat hunting. The C++ malware uses RC5-encrypted UDP for stealthy, multi-threaded C2 operations.

The Shanya Crypter (VX Crypt) is a new PaaS used by Akira/Medusa to bypass EDR. It deploys a kernel driver attack to kill security products and uses PEB manipulation for stealth.

Security researchers have uncovered a sprawling botnet operation fueled not by a state-sponsored APT, but by a college student in Bangladesh trying to pay for his education. A new report from the …

The Socket Threat Research Team has uncovered a malicious Go package that operated undetected for over four years. The package, a typosquat of a widely trusted library, contained a sophisticated b…

A cunning cyber-espionage campaign is targeting Chinese organizations with a twist of geopolitical deception. According to a new report from ReliaQuest, the Chinese Advanced Persistent Threat (APT…

A notorious Android spyware family has resurfaced with dangerous new capabilities, evolving from a simple data thief into a sophisticated surveillance tool that can actively fight off attempts to …

A unique Android banking trojan, FvncBot, targets mBank (Poland) customers. It uses HVNC and H.264 to stream screens and performs web-inject attacks via FCM/WebSocket C2.

The JS#SMUGGLER campaign uses "Junk Code" JavaScript and fileless PowerShell executed via mshta.exe to bypass EDR. This multi-stage attack silently installs the NetSupport RAT.

A new C-compiled RAT, CastleRAT, uses Steam Community pages to hide its C2. The malware deploys advanced features like UAC Bypass, screen capture, and clipboard hijacking for espionage.

Despite takedown, LockBit 5.0 resurges as a cross-platform threat. The new variant blinds Windows Event Tracing (ETW), uses Invisible Mode for stealth encryption, and overwrites free disk space.

Responding to user complaints, Windows 11 Build 26220 adds a setting to disable AI actions in the File Explorer context menu, reducing significant UI clutter.

The Exact Recon → Bug → Report Flow That Still Pays in 2025

Guía completa sobre la vulnerabilidad API8:2023 (Security Misconfiguration): Ejemplos, metodología de detección y mitigación esencial.

Hi Vipul from The Hacker’s Log here 👋 Today we’re diving into one of the most powerful bug bounty techniques that still works beautifully

There is a point in your life as an operator, builder, or diagnostician where you stop “looking at a place” and start “reading it.” The…

These will be helpful in your journey