Welcome to this new Medium post, in this one I will show you an interesting technique created and documented by hasherezade! The technique…

Hello all and longtime no see!

Walkthrough for “Baby” on Hack The Box

Joseph Goydish uncovers a critical integer overflow in iOS 26.2’s WebKit. Proof of Concept shows how attackers can crash browsers or trigger RCE.

MongoBleed (CVE-2025-14847) allows unauthenticated MongoDB memory leaks. With Joe Desimone's PoC released, upgrade to v8.0.17 or v7.0.28 now!

GreyNoise reveals a massive Japan-based holiday campaign: 2.5 million attacks targeting 767 CVEs to harvest access for ransomware gangs.

ERNW exposes "Headphone Jacking," a critical Airoha RACE flaw in Sony & JBL chips allowing hackers to eavesdrop and hijack connected smartphones.

pwn.ai reveals CVE-2025-54322, the first remotely exploitable zero-day found by autonomous AI agents, targeting Xspeeder SD-WAN gear globally.

EmEditor confirms its official site was compromised, redirecting users to a malicious MSI signed by WALSHAM INVESTMENTS LIMITED to steal sensitive data.

Google is upstreaming Propeller to LLVM, bringing its 10% performance boost for the Linux kernel and large-scale apps to the standard compiler toolchain.

The well-known cryptocurrency wallet extension Trust Wallet appears to have recently fallen victim to a supply-chain attack. Attackers somehow compromised the extension and injected malicious code…

Samsung confirms it has "frozen" Google Play system updates to protect One UI 8 stability. Learn why your Galaxy is stuck and when it will resume in 2026.

Aikido Security uncovers the first sophisticated malware on Maven Central: a "prefix swap" attack on the Jackson library used to steal data.

Microsoft is testing a major fix for Windows 11 File Explorer that eliminates redundant indexing, slashing RAM and CPU usage for faster file searches.

Google and Microsoft execs are clashing with South Korean suppliers as a massive HBM shortage forces Apple to face a 230% price hike for iPhone RAM.

Initial Access

The stability and resilience of the internet rest largely on systems that remain invisible to most users. Among these foundational pillars is the root DNS server system—a critical mechanism respon…

Within cybercriminal circles, interest in recruiting insiders from within companies is surging. Rather than mounting complex external intrusions,

A coordinated cybercrime crackdown across Africa has culminated in hundreds of arrests and the seizure of millions of

As a Christmas gift to the open-source community, NVIDIA has released the CUDA Tile IR intermediate representation as

The Excel format—long regarded as a harmless office staple—is increasingly being exploited as an entry point for cyberattacks.