At a Glance Organization SafePal (crypto hardware wallet maker) Data exposed Names, emails, shipping addresses, phone numbers, purchase details Affected About 39,798 customers (company figure) Cau…

Apple has spent recent years aggressively championing a paperless, digitized way of life, and one strand of that push – integrating physical driver’s licenses and state-issued identifi…

Domestic mini PC manufacturer GEEKOM was recently discovered to be distributing driver downloads through its official website that contained a backdoor. A Reddit user first spotted the anomaly and…

At a glance Actor: Kimsuky (suspected North Korea threat actor) Activity type: Spear phishing and AI experimentation Targets: Foreign diplomatic missions, military, security, and virtual asset sec…

Microsoft has improved the networking capabilities of the WinRE recovery environment in the latest Windows 11 Insider Preview build. According to a recent Neowin report, this enhancement allows th…

TL;DR JetBrains fixed eight security flaws in YouTrack, its issue-tracking platform. The most serious, CVE-2026-75045, is rated Critical. It let an unauthenticated attacker download database backu…

At a glance Malware family: Abyssos Threat actor: Unknown Target or victims: Windows endpoints Delivery vector: Under investigation Key capabilities: Remote administration, hidden VNC, credential …

At a glance Malware family Aeternum (blockchain-based C2 botnet loader) Threat actor Unconfirmed; blockchain activity links to an operator using the moniker “LenAI” (suspected, not con…

Security testing has always had an annoying problem. You can run static analyzers. You can scan dependencies.

Run these against your own build. The uncomfortable part is how fast it goes.

How Blue Teams Can Detect Attacks Against AI Agents

A beginner-friendly walkthrough of SMB enumeration, unauthenticated share access, and file retrieval on Hack The Box.

A beginner-friendly walkthrough of FTP enumeration, anonymous authentication, and file retrieval on Hack The Box.

HTB blue team sherlock contains 7 questions to answer so lets start answering them,

What’s up everyone! Nitin here 👋

30-Second Version: I analyzed 81 disclosed race condition reports from HackerOne and found 5 patterns that covered almost every report. The…

My experience with CyberExam’s practical white-box web security certification, from source-code auditing to AI-graded reporting.

Fighting the web attackers, plus the 2025–2026 change where AWS turned WAF into a takeout menu and started letting you charge AI bots for…

Challenge Description