At a glance Organization Trezor (via shipping provider ShipMonk) Data exposed Names, emails, phone numbers, shipping addresses, order numbers People affected 13,689 initially, plus about 67,000 mo…

SignalWire shipped FreeSWITCH 1.11.3 on August 28, 2026. The vendor called it an important release with critical security fixes. It closes a FreeSWITCH vulnerability that attackers already use for…

At a glance Actor or group Toy Ghouls (aka Bearlyfy, Labubu, Laboo.boo, Feral Wolf) Activity type Custom backdoor deployment, financially motivated extortion Targets Russian organizations, includi…

Hello, I am Nitin.

Remembering a different password for every website is exhausting. There is one for your email, another for Instagram, another for your…

Part 4 of 7: Understanding the USB Control Plane Before You Start Sending Requests

Task 2 — Discovery Overview

Introduction

So, the Spookypass is a entry level easy challenge available in HTB for learning begineer friendly reverse engineering problem. So, lets…

A seemingly ordinary project folder can transform into a dangerous trap. This trap springs before the developer even executes their first command. Manifold Security researchers recently discovered…

GitHub has been turned into a shop window for malware, and the victim need neither open a suspicious archive nor visit a counterfeit website. Researchers at Avyukt Security have uncovered Operatio…

The White House officially initiated a six-month pilot program named Project Watershed 250 in Texas. This vital initiative aims to discover practical methods for shielding American water and waste…

At a glance Malware family The Gentlemen ransomware (Go-based locker; Windows, Linux, ESXi builds) Threat actor GOLD SHERWOOD (confirmed by Sophos CTU) Targets Organizations across many sectors, w…

Reconnaissance is the part of bug bounty hunting that separates the people who find bugs consistently from the people who get lucky once…

I was participating a new private program at h1 and I was desperately discovering site to see anything unusual. As all expert says “do not…

Practical Bug Bounty — Notes & Lab Walkthroughs

In Part 1, I discovered how the “Forgot Password” feature could be used to bypass the admin verification process and grant access to an…

PostgreSQL is one of the most widely used open source database platforms in modern technology environments. It supports enterprise…

HackerOne describe themselves as a global leader in Continuous Threat Exposure Management (CTEM), partnering with the global security…