Written By Fida Hussain

Author: Vxmp & malloc-consolidate

ASOS Hackers Hijack App Notifications, Claim Snowflake Data Breach

Traditional identity controls establish who a person is, but autonomous agents create another question: whether the software is still performing the task its user approved.

A man calling himself Jia Tan spent roughly two and a half years inserting a backdoor into a tiny compression library that sits inside the…

Dalam lanskap keamanan siber yang terus berkembang, istilah vulnerability atau celah keamanan sering kali menjadi pusat perhatian. Ketika…

In this write-up, we will walk through the step-by-step solution for the BOLT room on TryHackMe. We will cover initial network scanning…

From unsafe code execution to MCP authorization and blind data exfiltration

Hello Friend , Good to see you again

El 2 de octubre de 2026, el Gobierno de Guanajuato suspendió temporalmente los servicios de los Kioscos Digitales del SATEG después de…

En 2026, la randomisation MAC ne suffit plus à protéger votre vie privée sur les réseaux Wi-Fi. Les Information Elements (IE) de vos trames…

Attackers Seize Three Country-Code Domains Google’s security team has reported a recent wave of registry hijacks. Attackers took over three top-level domains: .gh for Ghana, .sl for Sierra L…

TL;DR ASUSTOR has patched CVE-2026-105324, a critical ASUSTOR ADM vulnerability with a CVSS 4.0 score of 9.2. The flaw lets an unauthenticated remote attacker read arbitrary files on a NAS device.…

TL;DR HPE Networking has patched nine HPE AOS-Switch vulnerabilities, and six of them rate Critical. The worst let an unauthenticated attacker run code or bypass login on the switch. Admins should…

TL;DR Maintainers of Handlebars.js have patched two critical flaws that can lead to remote code execution. Each Handlebars.js vulnerability lets an attacker run arbitrary JavaScript on a Node.js s…

TL;DR Google has promoted Chrome 155 to the Stable channel with 247 security fixes. The Chrome 155 security update patches four Critical use-after-free bugs and at least 53 High-severity flaws. Go…

TL;DR Arista has patched six flaws in the CloudVision CUE (CV-CUE) backend for its WiFi software. The worst is CVE-2026-102159, a critical Arista CloudVision CUE vulnerability with a CVSS score of…

TL;DR HPE Networking has fixed 28 ClearPass Policy Manager vulnerabilities in a single advisory, and ten of them rate Critical. The worst flaws let an unauthenticated remote attacker run code or g…

IDOR Trick Leads to Damage Across the Entire Business الحمد لله، والصلاة والسلام على رسول الله Hello, I’m Mahmoud Farag (RM4). I’d like to share a security …

“بسم الله الرحمن الرحيم”