North Korean hackers are now targeting AI tools like Cursor and Claude. The OtterCookie malware steals API keys and conversation logs. Is your dev environment safe?

TP-Link urges Archer AX53 v1.0 users to update firmware to fix 5 critical flaws, including OS command injection & file leaks. Secure your network now!

LinkedIn job seekers are being targeted by a sophisticated Vietnam-based group using PXA Stealer. This 100MB malware bypasses MFA and drains crypto wallets.

A PortSwigger Lab Walkthrough

Hello everyone,

Welcome

This document summarizes key cyber threats identified between Mar 30 and Apr 5, 2026, including related threat events

Security Assessment and Testing

HPE Aruba Networking patches a critical 8.8 CVSS open redirect in its Private 5G Core. Prevent credential harvesting—update to version 1.25.3.1 immediately.

🐉 Top 20 Kali Linux Tools for Bug Bounty (Professional Guide) Kali Linux provides a powerful environment for security testing, but effectiveness in bug bounty comes from using the right tools with …

Introduction

Introduction

Cuando estamos haciendo ingeniería inversa a cualquier software malicioso, o de plano un software comercial, es normal encontrarnos con las…

I found my company’s exposed secrets in two hours. No hacking required.

Introduction:

*My first hands-on reconnaissance lab: using Nmap to map every open port, service, and version on a deliberately vulnerable machine — and…

In today’s hyper-connected digital landscape, cyber threats are no longer a matter of “if” but “when.” Businesses of all sizes are…

If you think an email address is just a way to send messages, you’re thinking like a civilian not an analyst.

DomainTools exposes North Korea’s "mature portfolio model": a compartmentalized cyber strategy designed for mission specialization and attribution resistance.

The screen is dim enough that it stops looking like a screen.