What’s up, hackers? Ready to check out another reconnaissance tool? 🚀

A newly disclosed vulnerability, tracked as CVE-2026–10107, affects MoviePilot v2, an open-source media automation and management project…

Kaspersky details how the newly named Armored Likho APT uses BusySnake Stealer, AI-generated loaders, and phishing to target government and energy organizations.

TL;DR Foxit shipped Foxit PDF Reader 2026.1.2 and PDF Editor 2026.1.2 for Windows. The release fixes 28 security flaws. Twenty of them can lead to arbitrary code execution when someone opens a cra…

TL;DR OpenSSH 10.4 landed on July 6 with eight security fixes. The most serious is a client-side use-after-free, CVE-2026-60002, scored 7.7. Most other issues involve file transfers and server har…

Ghost released version 6.37.0 to fix a critical cache poisoning bug. The Ghost cache poisoning flaw, tracked as CVE-2026-53943, scores 9.6 on the CVSS scale. An unauthenticated attacker can abuse …

A remote code execution flaw affects Network UPS Tools, the widely used NUT monitoring suite. The bug, CVE-2026-54161, carries a CVSS score of 8.1. It can run commands as root on the monitoring ho…

The pretix team shipped version 2026.5.3 to fix two critical flaws. The update also covers 2026.4.5 and 2026.3.5.post1, plus several payment plugins. Both bugs rate critical, so admins should patc…

Disclaimer: This post is strictly for educational, informational, and cybersecurity research purposes; it does not endorse, encourage, or…

The “CNA Enrichment Recognition List” for July 6, 2026, is now available with 268 CNAs listed. Published monthly on the CVE website, the…

We built an autonomous pentester on top of a large language model. It runs recon, picks and drives real offensive tools, exploits what it…

Building the Mindset before Learning the Techniques

TJ Null

TJ Null

Hello everyone! In this write-up, we will walk through the Dev Diaries room on TryHackMe. This room focuses on Open Source Intelligence…

Machine details

Telegram — @Watkins_Alex