Microsoft reports active exploitation of a Windows CLFS zero-day (CVE-2025-29824) to escalate privileges and deploy ransomware. Learn about the attacks, the threat actors involved, and how to mitigate the risk.

Siemens ProductCERT issued a security advisory detailing critical vulnerabilities in the SENTRON 7KT PAC1260 Data Manager. The flaws could allow remote attackers to execute code, bypass authentication, and more.

A vulnerability (CVE-2024-12556) in Kibana allows code injection via prototype pollution, file upload, and path traversal. Upgrade to the latest version or disable the integration assistant to mitigate this high-severity security risk.

CYFIRMA researchers discovered Neptune RAT, an advanced Remote Access Trojan targeting Windows. Learn about its destructive features, evasion techniques, and distribution methods.

The latest Chrome update addresses a high-severity "use after free" vulnerability in Site Isolation (CVE-2025-3066). Learn about the security risk and the importance of updating your Chrome browser

Attackers are using "Rogue RDP" techniques, abusing RemoteApp and resource redirection to steal files and conduct espionage

Microsoft's April 2025 Patch Tuesday addresses 134 vulnerabilities, including a zero-day under active exploitation. This update covers critical RCE flaws in Windows, Office, and more

JPCERT/CC reports multiple vulnerabilities in Inaba Denki Sangyo Wi-Fi AP units, including command injection and authentication issues

Vidar Stealer malware is distributed by masquerading as BGInfo.exe, exploiting expired signatures and file discrepancies to evade detection

Attackers are using SourceForge to distribute malware, including a ClipBanker Trojan and a cryptocurrency miner, disguised as a Microsoft Office enhancement suite.

The Grandoreiro banking trojan is being spread through phishing campaigns. Learn about the attack methods and how to stay safe.

A security flaw in Apache's mod_auth_openidc module can expose protected web content to unauthenticated users. Patch or mitigate to secure your server

Ten popular Visual Studio Code extensions were found secretly installing XMRig miners, exploiting users’ CPUs for unauthorized cryptomining.

السلام عليكم ورحمة الله وبركاته .,,

In this journey, I will share my experience with a valid report I submitted. This will be a series until I discover new vulnerabilities…

APIs are powerful but can be risky when misconfigured. In this week’s article, we explore how attackers can steal sensitive data from APIs…

Hey, quick question — do you still have one of those old DVRs lying around? You know, those little boxes tucked away in a corner, quietly…

Abstract: The American political landscape since 2016 has been significantly shaped by the convergence of hacktivism and the proliferation…

Hey there, cybersecurity enthusiast (or just someone who likes to stay ahead of the curve) — Let’s talk about something massive that just…

💡 Ever wonder how to make remote work smoother, more secure, and (dare we say) actually enjoyable for your team? If your support tickets…

This is a walkthrough of Networking Concepts from TryHackMe