A glaring configuration oversight in select H3C wireless controllers and access points has opened the door for remote attackers to seize root-level control of the devices. The vulnerability, track…

Recently, Taiwan’s National Security Bureau (NSB) has released a comprehensive report detailing a massive surge in state-sponsored cyber aggression. The analysis for the year 2025 paints a grim pi…

We’re back with another TryHackMe challenge. called LO-FI

This box is ranked medium on THM, it involves us mounting a file share to get access to RSA key pair integers, which we can use to recover…

In the world of cybersecurity, “Boot2Root” machines serve as the ultimate playground for testing technical depth and creative lateral…

The Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) Catalog with two new entries that span nearly two decades of computing history. Th…

The “central nervous system” of automation for thousands of companies has a critical weakness. A new report from Cyera reveals a devastating vulnerability in n8n, the popular workflow …

In a new report, the Huntress Tactical Response Team details a sophisticated intrusion discovered in December 2025 where threat actors successfully executed a “VM escape”—breaking out …

A sophisticated new variant of the GoBruteforcer botnet is on the loose, and it’s capitalizing on a thoroughly modern problem: the “mass reuse of AI-generated server deployment example…

A critical security flaw has been unearthed in TLP, the widely used power management utility for Linux laptops, potentially allowing unauthorized users to bypass authentication checks and tamper w…

A new, highly aggressive ransomware strain is cutting a swath through the healthcare sector, leaving hospitals and critical organizations scrambling to protect their data. Security researchers at …

GitLab has issued a critical security release for its Community Edition (CE) and Enterprise Edition (EE) platforms, patching a raft of vulnerabilities that range from high-severity Cross-Site Scri…

Note: I originally disclosed these findings to the Google AI Bug Bounty (or VRP program), but they rejected them as being a non-qualified…

Two critical vulnerabilities were published December 23, 2025 affecting LangChain Python (CVE-2025–68664, CVSS 9.3) and JavaScript…

สวัสดีครับ ‘โฟน’ นะครับ สำหรับWriteups ในครั้งนี้มาจากการแข่งขัน Archa CTF บอกได้เลยครับว่าโจทย์สนุกทุกข้อ💖…

Pirate activist group and shadow library Anna’s Archive claims to have “backed up” the world’s largest music streamer

A Simple, High‑Impact Bug Bounty Technique

Most email bombers need a target email. I found a way to turn a User ID into a weapon, spamming verified users and causing financial chaos…

In early 2026, security researchers revealed a critical vulnerability in n8n, a popular automation platform, that allows attackers to…

Active Directory nima va nima uchun u barcha breach’larning markazida?