Uncover the tactics used by the North Korean APT group Kimsuky in their cyber espionage operations, including the use of the RDP Wrapper for persistent access.

Critical vulnerabilities in Four-Faith F3x36 routers running v2.0.0 firmware. Learn about CVE-2024-9643 and CVE-2024-9644 and their severity.

Discover the vulnerabilities affecting the Apache James mail server. Learn about CVE-2024-45626 and CVE-2024-37358 and how they can lead to denial of service attacks.

Learn about the widespread BADBOX botnet infecting Android devices via compromised firmware. Stay protected from this insidious threat.

Learn about the high-severity vulnerabilities in HPE Aruba Networking's ClearPass Policy Manager (CPPM) software, including CVE-2025-23058, and how to secure your network.

Uncover the growing cyber threat facing the aviation industry. Recent attacks on ICAO and ACAO reveal the risks of cyberespionage.

Learn about a critical security vulnerability (CVE-2025-24964) in Vitest. Discover how attackers can execute arbitrary code through a Cross-site WebSocket Hijacking issue.

Learn about the latest cyber threats involving ScreenConnect and how threat actors are leveraging this RMM tool for malicious purposes.

Unveiling the sophisticated Silver Fox APT: Learn how this multi-stage malware campaign deploys the resilient ValleyRAT.

GreenSpot APT, an advanced persistent threat group, is orchestrating a phishing campaign targeting users of China's 163.com email service.

Some bugs expose passwords. Some let you steal accounts.

Hi everyone,

Originally published at https://techbylorenzo.com on September 13, 2024.

DeTEE has released a bloody Competition for Hackers, written in Rust. If you are an experienced h4x0r or want to become one, I bet this is…

Recon

In any organization or project, managing risk is a vital part of ensuring long-term success. Two key tools used in risk management are the…

WhatsApp has issued a shocking warning to its users. A highly advanced hacking tool has compromised nearly 100 individuals. This breach…

Fan Economy Can Sometimes Go to Ridiculous Places

Analyzing a Python Stealer — Investigating an obfuscated script designed for data exfiltration. 🚨 Read more! #CyberSecurity

“It always bothers me that, according to the laws as we understand them today, it takes a computing machine an infinite number of logical…

a very important insight into the infrastruture threat modeling