WiFiPumpkin3 is a powerful framework designed for rogue access point attacks and network security testing. It allows security researchers, and red teamers to create fake Wi-Fi networks, custom captive portals, intercept traffic, and deploy phishing attacks.…

In previous series of blogs I focused on installation of Kali NetHunter on older model of TicWatch Pro 2018 (catfish) which might be for some of you a good choice if you already have them forgotten in your drawer or you can get them cheap to play around.…

Learn about the critical security vulnerability in iTerm2 and how it could have exposed sensitive user data. Stay informed and protect yourself.

Discover SysBumps, the first successful KASLR break attack targeting macOS systems on Apple Silicon processors. Find out how vulnerabilities in speculative execution can compromise kernel memory.

Discover the risks posed by the npm Supply Chain Attack on Ethereum developers. Find out how attackers targeted the Nomic Foundation's trusted tool, Hardhat.

Discover the flaw in Windows BitLocker that allows attackers to bypass encryption and access sensitive data. No screwdrivers or hardware hacking required.

Uncover the details of a sophisticated Chrome extension threat campaign: how phishing, credential theft, and malicious code impacted developers and end users.

Take action to secure your ASUS router! Find out about the vulnerabilities (CVE-2024-12912 and CVE-2024-13062) and why it's crucial to update your firmware.

Enhance security in the Python ecosystem with Project Quarantine. Learn how PyPI's new feature mitigates risks from malicious packages.

Uncovering the truth about GitHub's star-rating system: a study reveals widespread fraudulent stars manipulating repository popularity.

Discover the future of satellite internet with Starlink's V3 satellites. Increase bandwidth, improve speeds, and expand your online possibilities.

SafeBreach also released a PoC tool that tests a vulnerable Windows Server against CVE-2024-49112, available on their GitHub repository.

Stay informed about the critical vulnerabilities in WhatsUp Gold network monitoring software. CVE-2024-12108 allows complete server control through the public API.

Learn about the evolution of LegionLoader, a sophisticated downloader malware with a wide range of capabilities, including capturing screenshots and stealing information.

Discover the new technique called Bad Likert Judge that can bypass the safety measures of Large Language Models (LLMs) and generate harmful content.

D-Link issues critical advisory for End-of-Life routers. Learn about the vulnerabilities exploited by botnets and the need for replacement.

Learn about the proof-of-concept (PoC) exploit for CVE-2024-21182 in Oracle WebLogic Server. Understand the risks and take action to secure your server.

Getting started with penetration testing, or pentesting, might seem overwhelming, but it’s a fascinating and rewarding field.

Introducing the best free labs to practice xss vulnerability

Why Bug Bounty Platforms Are Vital in 2025