At a glance Actor Unnamed threat actor, likely a ransomware initial access broker Activity Vishing-led intrusion and custom backdoor deployment Targets Corporate and enterprise Windows environment…

Hello hackers, Welcome to the latest edition of Bug Bytes! In this month's issue, we'll be featuring: Intigriti turns 10! RCE in GitHub.com and GitHub Enterprise Server Burp Suite going agentic with B...

Hey everyone! Nitin here 👋

Format note: All reports below target a fictional company, vulnerable-corp.com, with fictional employee names, tokens, and IDs. They're…

Beyond the Air Gap — Part 1

A major flaw in Coldcard’s firmware has resulted in the compromise and draining of 500 Bitcoin addresses for a total of 594.4772 BTC…

The most important tool in network reconnaissance is not Nmap, not Shodan, not any scanner at all. It is the ability to ask a question…

Room: Splunk: Setting up a SOC Lab Path: SOC Level 2, Section 2: Advanced Splunk Difficulty: Intermediate Time: 60 minutes Prerequisites…

Scenario: A short PCAP was captured from the guest network of a hotel. Tiny packets were observed going out to a :8080 address at…

Executive Summary:

https://tryhackme.com/room/hh-packedlight-02e5330c

Room: Packed Light Category: Forensics / Network Analysis Difficulty: Easy Time taken: ~20 minutes

TryHackMe Walkthrough: Splunk — Exploring SPL (Step-by-Step with Q&A) Room: Splunk: Exploring SPL Path: SOC Level 2 → Section 2: Advanced Splunk Difficulty: Intermediate | Time: ~60 min …

This challenge involves analyzing network traffic to identify a covert C2 (Command & Control) channel and exfiltrate data hidden in *HTTP…

Someone was smuggling data out of the resort network one cookie at a time. We used Wireshark, Base64 and a single XOR key to decode the…

A backdoored ARVE WordPress Plugin release could grant attackers administrator access with one token, but WordPress.org blocked automatic distribution to WordPress sites.

XRP volatility drives faster crypto trading as AI tools gain traction, while phishing, exchange attacks and automation risks test digital asset safeguards.

An infected Word document can imperceptibly distort a corporate report and subsequently transfer malicious instructions into new files. Merely opening the document is insufficient to launch this a…

Understanding Dangling DNS Records Forgotten domain records often lurk unnoticed within corporate networks. Consequently, these abandoned entries create severe security risks when cloud resources …

Sometimes, compromising a digital environment requires zero downloads or explicit user confirmations. Indeed, the CVE-2026-10702 vulnerability embedded within Firefox for Android enabled seamless …

TL;DR OpenAM 16.1.2 patches four security flaws in the open-source access management server. Three of these OpenAM vulnerabilities lead to remote code execution. The worst, CVE-2026-62379, allows …