Box: Mice
Community Rating: Hard

Secrets in Source : voir le code source pour trouver le flag

Three containerd critical vulnerabilities, including CVE-2026-53492, allow attackers to execute host commands and poison image caches. Patch immediately.

Three Webmin vulnerabilities, including a critical authentication bypass (CVE-2026-56020), expose servers. Update to Webmin 2.641 to stay safe.

The Squidbleed vulnerability is a Squid proxy memory leak exposing user credentials. CVE-2026-47729 details and PoC exploit code are now public.

Picture two new SOC analysts on their first day.

Machine details

By Patrick Nolen

Attackers injected malicious JavaScript into Okendo Reviews, a product review widget used by more than 18,000 brands. The compromised script loaded on store pages. After a few checks, it could sho…

Trust in a familiar sender keeps turning into a weak point. A new campaign against WhatsApp users builds on exactly that bet. The attackers send malicious files from already-hijacked accounts. The…

The longer an electronics supply chain grows, the harder it gets to keep trade secrets inside factory walls. India’s Tata Electronics has now confirmed a recent cyber incident. The confirmat…

The 2026 national health care fraud takedown charged 455 defendants. Authorities allege these telemedicine fraud schemes cost taxpayers over $6.5 billion.

Google Search now saves uploaded files, images, and audio in your history to train AI models. Here's how to view and turn off the Save Media setting.

Discover the latest Outlook for Mac glitch omitting original message text during replies, along with Microsoft's official workarounds.

Discover the Cloudflare PACT protocol, a privacy-first initiative with Chrome, Edge, and Firefox to eliminate CAPTCHAs and authenticate web traffic safely.

CISA flags an AVer PTC camera flaw, CVE-2026-40624, enabling remote code execution. The CVSS 9.8 RCE bug affects four PTC models.

I recently completed a INE practical lab on Windows privilege escalation and wanted to share a quick step-by-step breakdown.

Introduction

The paradigm shift toward dynamic database architectures has fundamentally changed how modern web services communicate. For years, system…

AI assistants have become a normal tool for debugging lately. Yet even an ordinary crash report can turn into a command that runs someone else’s code on your machine. Tenet Threat Labs has s…

Public details disclose an out-of-bounds read flaw (CVE-2026-43495) in the Linux kernel. This MediaTek t7xx WWAN flaw requires immediate patching.