SHADOW-VOID-042 impersonated Trend Micro via fake security advisories to breach defense, energy, and chemical firms. Tactics align with Void Rabisu (ROMCOM), using HR lures and targeted exploits.

A critical LPE flaw (CVSS 9.1) in Plesk's Password-Protected Directories allows Apache configuration injection. Any Plesk user can execute root commands and achieve full server takeover. Update immediately.

Ashen Lepus (Hamas-APT) significantly evolved during the conflict, deploying the AshTag modular .NET malware suite. It uses in-memory execution and Rclone for stealthy cyber-espionage against diplomatic targets in the Middle East.

GOLD SALEM (Storm-2603) is exploiting SharePoint via ToolShell then abusing the Velociraptor DFIR tool as a ransomware precursor. The group deploys Warlock and LockBit 3.0 variants, often targeting critical infra.

A critical flaw in Apache StreamPark uses a hard-coded encryption key and the insecure AES ECB mode, risking data decryption and JWT authentication token forgery. Update to v2.1.7 immediately.

Storm-0249 IAB abuses the SentinelOne EDR process via DLL sideloading to evade detection. The group uses LoLBin tools for fileless execution and sells access to ransomware groups like LockBit.

A High-severity (CVSS 7.5) flaw in ImageMagick's PSX TIM parser allows Arbitrary Memory Disclosure on 32-bit systems via an integer overflow. Patch immediately to v7.1.2-10.

CHALLENGE-1

This article explains how AI-driven attacks reshaped cyber threats in 2025 and what to expect in 2026.

Confessions of a $20/month user who accidentally unlocked a $300 feature.

Using a web-based code editor, learn the basics of Python and put your knowledge into practice by eventually coding a short Bitcoin…

Investigating suspicious executables with static and dynamic analysis tools in the town of Wareville.

This box is ranked medium-difficulty on THM, it involves us escalating privileges on a web application, SSRF on an internal API to read…

สวัสดีค่ะ วันนี้เราจะมาแชร์วิธีการหา root flag ในกล่อง Appointment ซึ่งเป็นกล่องใน Starting Point - Tier 1 ของ HackTheBox ค่ะ ถ้าพร้อมแล้ว…

Microsoft published a guide outlining recommended Windows 11 gaming PC specs from entry-level 1080p to high-end 4K, emphasizing NVMe SSDs for DirectStorage.

Amazon shifts DRM control to publishers/authors starting Jan 2026. Readers can download unencrypted EPUB/PDF files if the publisher consents, boosting reader choice.

Google is overhauling Health Connect with new tracking for alcohol and medical symptoms to challenge Apple Health. The redesign improves privacy via group permission management.

Google Translate, now powered by Gemini AI, upgrades text-to-text to handle slang and adds real-time voice translation that preserves the original speaker's tone.

Rumors suggest Samsung will discontinue all SATA SSDs by Jan 2026, shifting entirely to M.2. The move will impact global supply, legacy systems, and could raise prices.

Disclaimer: The following information is for educational purposes only. The testing described below was performed during an authorized…

Members who leave the community can still access post content through the API. This is inconsistent with the existing statement.