สวัสดีค่ะ วันนี้เราจะมาแชร์วิธีการหา root flag ในกล่อง Explosion ซึ่งเป็นกล่องใน Starting Point - Tier 0 ของ HackTheBox ค่ะ ถ้าพร้อมแล้ว…

SpearSpray is an advanced AD password spraying tool using Kerberos and LDAP, featuring jitter and domain policy awareness to bypass account lockouts for stealthy attacks.

Google has released an unscheduled Chrome update to patch a zero-day vulnerability already being exploited in active attacks.

Microsoft has released its December security updates: Patch Tuesday brings fixes for 57 vulnerabilities, including three zero-days (one

The investigation in Japan has detained two Chinese nationals suspected of orchestrating the largest known market-manipulation scheme involving

Experts at Doctor Web have identified a new click-fraud trojan, Trojan.ChimeraWire, which disguises itself as the activity of

The financially motivated group Storm-0249, long known as a broker of initial access for ransomware operators, has markedly

A newly discovered vulnerability in Node.js, designated CVE-2025-55182 and informally dubbed React2Shell, has become a favored weapon of

The widow of Saudi dissident journalist Jamal Khashoggi has filed a complaint with the French prosecutor’s office, alleging

The International Criminal Court has released a draft policy aimed at confronting crimes committed through digital technologies. The

OpenAI launches GPT-5.2 ("Red Alert") to reclaim the top spot from Gemini 3 Pro. The model achieves perfect math scores and promises unparalleled reliability for enterprise tasks.

Disney invests $1B in OpenAI and licenses 200+ characters (Mickey, Iron Man, Vader) for Sora and ChatGPT Images—a major pivot to defining the rules of AI-generated content.

OpenAI integrates Photoshop, Acrobat, and Adobe Express into ChatGPT via MCP. The move creates an "AI super-app," enabling 800M users to edit images and PDFs directly in chat.

Google rapidly adopts the MCP protocol, launching managed servers for AI agents. This enables seamless, autonomous tool use across Google Maps, BigQuery, and GKE infrastructure.

Streaming television appears to be retracing the path once taken by traditional cable. YouTube TV has announced that it will introduce a new subscription model, “YouTube TV Plans,” in early 2026. …

If mobile apps were high school stereotypes, social media would be the popular kid everyone gossips about, but secretly rolls their eyes…

Most of us trust popular tools like React without thinking twice. It’s everywhere — from small personal projects to huge apps used by…

Every attack follows a pattern.

Instagram hacking is no longer about “technical genius.”
Today, most attacks succeed because of psychology, trust, urgency and…

NOTE: This is not a technical break-down of React2Shell Vulnerability, as it’s already been covered by Trend Micro. This is currently…