FBI/CISA warn pro-Russia hacktivists (CARR, NoName057) are targeting critical infrastructure with unsophisticated attacks. They exploit unsecured VNC connections to manipulate HMIs and cause physical damage.

CISA warned of a Critical (CVSS 9.4) flaw in D-Link DCS-F5614-L1 cameras. Missing Authentication allows attackers to bypass login, steal admin credentials, and hijack video feeds. Patch immediately.

A Critical RCE (CVSS 10.0) flaw, React2Shell, in React/Next.js's Flight protocol allows unauthenticated system takeover. North Korean and Chinese state actors are actively exploiting the deserialization bug.

Makop ransomware operators now use GuLoader and BYOVD (ThrottleStop.sys) to bypass EDR and security. The "low-effort" campaign targets RDP-exposed networks, with 55% of attacks aimed at India.

DeadLock Ransomware uses BYOVD (Baidu driver exploit) and the EDRGay.exe loader to kill EDR/AV at the kernel level. It uses a custom stream cipher and deletes shadow copies to prevent recovery.

This article is a walkthrough guide to solving the challenges in the Google XSS Game on Appspot.

Despite years of warnings, “123456” and “password” remain among the most common passwords. In an age of billion-record data breaches, weak…

Artificial Intelligence (AI) has revolutionized every industry, and cybersecurity is no exception. In 2025, we are witnessing a digital…

The $800 Parameter: How One Unsanitized Input Revealed a Global Security Gap

CRITICAL FINDING! Massive leaked merchant emails along with client IDs in public PayPal SDK URL. A major PII data leak.

Bus Simulator Vietnam là một tựa game mô phỏng lái xe buýt tại Việt Nam, mang đến trải nghiệm chân thực trên các tuyến đường và địa danh…

Imagine waking up, grabbing your phone, and discovering someone has already rummaged through your camera, microphone, emails, messages —…

Car Parking Multiplayer là một tựa game mô phỏng lái xe và đậu xe theo phong cách thế giới mở, nơi người chơi có thể điều khiển nhiều loại…

The Story

Network Discovery — Scan-ta Clause

Malware Analysis — Egg-xecutable

สวัสดีค่ะ วันนี้เราจะมาแชร์วิธีการหา root flag ในกล่อง Dancing ซึ่งเป็นกล่องใน Starting Point - Tier 0 ของ HackTheBox ค่ะ ถ้าพร้อมแล้ว…

Simple Overview of the Updated OWASP Top 10

Stored XSS occurs when malicious input is saved on the server and executed every time a user loads the affected page.

What if I told you that 93% of successful bug bounty hunters don’t rely on luck or magic? They use the right tools — and a razor-sharp…