Recently, security analysts had discovered a BGP leak at Venezuela’s state-owned telecommunications company CANTV shortly before the U.S. military operation aimed at apprehending Nicolás Maduro. B…

The “black box” of a highly sophisticated Apple zero-day has just been cracked open. Security researcher jir4vv1t has publicly dissected CVE-2025-43529, a critical WebKit vulnerability…

A critical pre-authentication command injection vulnerability has been uncovered in the Trendnet TEW-713RE Wi-Fi extender, allowing remote attackers to seize full control of the device with a sing…

Your smartphone might be the only accomplice a thief needs to drain your bank account, even if your card never leaves your wallet. A new report from Group-IB reveals a surging underground market f…

A glaring configuration oversight in select H3C wireless controllers and access points has opened the door for remote attackers to seize root-level control of the devices. The vulnerability, track…

Recently, Taiwan’s National Security Bureau (NSB) has released a comprehensive report detailing a massive surge in state-sponsored cyber aggression. The analysis for the year 2025 paints a grim pi…

We’re back with another TryHackMe challenge. called LO-FI

This box is ranked medium on THM, it involves us mounting a file share to get access to RSA key pair integers, which we can use to recover…

In the world of cybersecurity, “Boot2Root” machines serve as the ultimate playground for testing technical depth and creative lateral…

The Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) Catalog with two new entries that span nearly two decades of computing history. Th…

The “central nervous system” of automation for thousands of companies has a critical weakness. A new report from Cyera reveals a devastating vulnerability in n8n, the popular workflow …

In a new report, the Huntress Tactical Response Team details a sophisticated intrusion discovered in December 2025 where threat actors successfully executed a “VM escape”—breaking out …

A sophisticated new variant of the GoBruteforcer botnet is on the loose, and it’s capitalizing on a thoroughly modern problem: the “mass reuse of AI-generated server deployment example…

A critical security flaw has been unearthed in TLP, the widely used power management utility for Linux laptops, potentially allowing unauthorized users to bypass authentication checks and tamper w…

A new, highly aggressive ransomware strain is cutting a swath through the healthcare sector, leaving hospitals and critical organizations scrambling to protect their data. Security researchers at …

GitLab has issued a critical security release for its Community Edition (CE) and Enterprise Edition (EE) platforms, patching a raft of vulnerabilities that range from high-severity Cross-Site Scri…

Note: I originally disclosed these findings to the Google AI Bug Bounty (or VRP program), but they rejected them as being a non-qualified…

Two critical vulnerabilities were published December 23, 2025 affecting LangChain Python (CVE-2025–68664, CVSS 9.3) and JavaScript…

สวัสดีครับ ‘โฟน’ นะครับ สำหรับWriteups ในครั้งนี้มาจากการแข่งขัน Archa CTF บอกได้เลยครับว่าโจทย์สนุกทุกข้อ💖…

Pirate activist group and shadow library Anna’s Archive claims to have “backed up” the world’s largest music streamer

A Simple, High‑Impact Bug Bounty Technique