PayPal seeks an industrial bank charter in Utah to cut reliance on partners, fund small businesses directly, and consolidate its growing cryptocurrency and PYUSD stablecoin operations.

Google is retiring its Dark Web Report service in February 2026, stating it only caused anxiety by failing to offer users actionable steps to remedy leaked personal data.

A critical authentication bypass (CVSS 9.3) in FreePBX allows complete PBX takeover when the 'webserver' auth mode is enabled. Attackers can gain an admin session with a crafted HTTP header. Update immediately.

SantaStealer, a new MaaS info-stealer, is being aggressively marketed on the dark web. It's a BluelineStealer rebrand that uses C code and open-source libraries to steal crypto wallets and credentials, despite having amateur anti-analysis features.

A LPE flaw in Windows Admin Center allows any user to gain SYSTEM privileges. It exploits insecure directory permissions and a TOCTOU flaw to execute a DLL hijacking attack.

Add as a preferredsource on Google A deceptive new cyberattack campaign is turning one of WhatsApp’s most convenient

The Gentlemen ransomware group rapidly emerged, targeting 17 countries with double extortion. It uses BYOVD and GPO manipulation to bypass security and hit manufacturing, healthcare, and insurance sectors.

NexusRoute is a sophisticated Android RAT campaign impersonating Indian E-Challan/mParivahan via GitHub phishing. It steals UPI PINs and conducts surveillance using a native-backed and professionally maintained malware framework.

Following a data leak, emails from the French Ministry of the Interior's domain invited hackers to the 'new' BreachForums. The community warns it is likely a highly sophisticated honeypot.

Apple's iOS 26.3 beta now includes an official "Transfer to Android" option, allowing seamless migration of apps, photos, and eSIM, likely driven by EU regulatory pressure.

The Trump administration launches "Tech Force" to recruit 1,000 elite engineers for two-year terms, partnering with tech giants (Apple, NVIDIA) to upgrade federal AI infrastructure.

NVIDIA acquires Slurm maintainer SchedMD to control GPU scheduling, and launches Nemotron 3 (Mamba-Transformer hybrid) to build a comprehensive AI ecosystem moat.

Reuters: Meta executives tolerated $3B+ in scam/illegal ads from China due to revenue pressure, using "whitelisting" to protect top agencies and prioritizing profit over user safety.

API10/UCA Guide: Insecure consumption of data from external services or microservices. Learn how to exploit and mitigate the risk.

INTRODUCTION : Le Silence avant la Tempête

Scan-ta Clause — Day 7

NVIDIA issued a Critical (CVSS 9.0) patch for Isaac Lab and the NeMo Framework, fixing flaws that allow code execution and data tampering in AI models.

A critical LPE (CVE-2025-14282) in Dropbear SSH allows users to gain root access via Unix socket forwarding. Impacting embedded Linux, it's fixed in v2025.89.

Snake 8 Ball Pool là một tựa game kết hợp giữa hai thể loại quen thuộc: Snake (rắn săn mồi) và 8 Ball Pool (bi-a 8 bóng). Trong game này…

Introdução Como primeira story aqui no Medium, gostaria de compartilhar a minha experiência e minha triagem durante a realização da room…

Name: Outbound
Difficulty: Easy 
OS: Linux
Link: Hack The Box :: Hack The Box