How a Misconfigured PHP Directive Exposed Internal Server Paths

Hello everybody! In this article, we want to show a small tool that Ilya(@typecookie) and I built to monitor vulnerabilities in Docker…

Managing who gets access to what is central to application security. Access control models provide structured ways to make these decisions…

The security research group vx-underground, active on social media platforms, recently released a series of disclosures concerning attacks against Ubisoft and its Rainbow Six franchise. Because th…

The U.S.-listed cryptocurrency exchange Coinbase recently announced that Indian police have once again arrested a former employee suspected of accepting bribes in exchange for handing over custome…

Entenda como participar de um programa de hacker de forma legal, conheça os principais modelos e veja como atuar em programas de bug bounty na BugHunt.

Intercepting Deep Links to Hijack Accounts in the Arrive App

Entenda como participar de um programa de hacker de forma legal, conheça os principais modelos e veja como atuar em programas de bug bounty na BugHunt.

Introduction

KittyLoader is a highly evasive loader written in C / Assembly. Features Hijacks early execution by replacing the C runtime entrypoint (__scrt_common_main_seh) with custom assembly. Hides all modu…

A serious incident caused by ransomware has struck Romania’s largest coal-fired power producer, Oltenia Energy Complex. The attack, detected during the night of December 26, disrupted digital syst…

At the recent Chaos Communication Congress in Germany, a new warning was issued about the risks associated with AI agents. According to information security specialist Johann Rehberger, a computer…

Cyber-espionage attributed to the Chinese group HoneyMyte—also known as Mustang Panda and Bronze President—has reached a new level. Researchers have observed the deployment of an advanced version …

Coinbase has reported the first arrests in its investigation into the sale of customer data: police in Hyderabad, India, have detained a former exchange support employee suspected of accepting bri…

A dangerous vulnerability has been discovered in the Trust Wallet browser extension, potentially allowing attackers to steal users’ cryptocurrency. The issue affected version 2.68, and the wallet’…

South Korea’s Ministry of Science and ICT has stated that Korea Telecom (KT) may have exposed its subscribers to risk for years due to poorly secured home mini base stations. According to the mini…

A foreign hacker who stole cryptocurrency worth more than 1.7 billion won (approximately $1.18 million) using malware that covertly replaced wallet addresses has been extradited to South Korea. Ac…

U.S. and Australian cybersecurity authorities have confirmed that hackers are already exploiting a newly disclosed vulnerability in MongoDB-based data storage systems. The issue surfaced over the …

Vulnerabilities discovered in wireless headphones powered by Airoha chips have opened the door to remote compromise of the smartphones they are connected to. The flaws identified by security resea…

Windows 11 continues to accrete web components virtually everywhere—from Discord and Teams to WhatsApp, Windows Search, the Start menu, and even the new agenda view in the notification center. The…