Launcher tool that is able to switch between all of the three firmware without a need of a computer, and even while on the go.

The Cheap Yellow Display (CYD) is a cost-effective development board that has captured the attention of the maker community. Featuring a 2.8-inch TFT touchscreen LCD and powered by an ESP32 microcontroller, this device is ideal for a variety of IoT and graphical…

ARP spoofing attacks are often used in combination with other types of attacks, such as DNS spoofing, SSL stripping, and more. These attacks can be used to steal sensitive information, launch phishing attacks.

ThreatFabric has identified a new cash-out tactic that wasn’t seen before called “Ghost Tap”, which cybercriminals use to exploit stolen credit card details linked to mobile payment services like Google Pay and Apple Pay. This method involves relaying NFC…

Scareware is a type of malicious advertisement designed to frighten users into believing their device is infected with a virus or has a critical issue. It typically manifests as a pop-up message or alert that mimics legitimate security warnings. The primary…

This blog is actually a video that explains how it is possible to locate Google and Apple smartphones legally by misusing device unique Advertising ID and stream of data collected by advertising plugins. These plugins are part of thousands of popular and…

Running Kali Linux on a Raspberry Pi Zero is a fantastic way to create a portable, powerful testing device. This guide will walk you through setting up Kali Linux Pi-Tail on a headless Raspberry Pi Zero 2 W that is powered and controlled from a smartphone…

WiFiPumpkin3 is a powerful framework designed for rogue access point attacks and network security testing. It allows security researchers, and red teamers to create fake Wi-Fi networks, custom captive portals, intercept traffic, and deploy phishing attacks.…

In previous series of blogs I focused on installation of Kali NetHunter on older model of TicWatch Pro 2018 (catfish) which might be for some of you a good choice if you already have them forgotten in your drawer or you can get them cheap to play around.…

Learn about the critical security vulnerability in iTerm2 and how it could have exposed sensitive user data. Stay informed and protect yourself.

Discover SysBumps, the first successful KASLR break attack targeting macOS systems on Apple Silicon processors. Find out how vulnerabilities in speculative execution can compromise kernel memory.

Discover the risks posed by the npm Supply Chain Attack on Ethereum developers. Find out how attackers targeted the Nomic Foundation's trusted tool, Hardhat.

Discover the flaw in Windows BitLocker that allows attackers to bypass encryption and access sensitive data. No screwdrivers or hardware hacking required.

Uncover the details of a sophisticated Chrome extension threat campaign: how phishing, credential theft, and malicious code impacted developers and end users.

Take action to secure your ASUS router! Find out about the vulnerabilities (CVE-2024-12912 and CVE-2024-13062) and why it's crucial to update your firmware.

Enhance security in the Python ecosystem with Project Quarantine. Learn how PyPI's new feature mitigates risks from malicious packages.

Uncovering the truth about GitHub's star-rating system: a study reveals widespread fraudulent stars manipulating repository popularity.

Discover the future of satellite internet with Starlink's V3 satellites. Increase bandwidth, improve speeds, and expand your online possibilities.

SafeBreach also released a PoC tool that tests a vulnerable Windows Server against CVE-2024-49112, available on their GitHub repository.