A security vulnerability (CVE-2025-30215) in NATS Server allows unauthorized actions on JetStream assets due to missing access controls.

A critical SSRF vulnerability (CVE-2025-32013) has been patched in LNbits, the Lightning Network wallet server. Learn how attackers could exploit LNURL authentication to access internal services and how to protect your systems.

The NCSC UK warns of BADBAZAAR and MOONSHINE spyware targeting Uyghur, Tibetan, and Taiwanese individuals. These sophisticated trojans collect sensitive data via fake apps. Learn how to protect your devices.

A high-severity XXE vulnerability (CVE-2025-32406) has been discovered in NAKIVO Backup & Replication, allowing potential unauthorized access to sensitive data. Users are urged to upgrade to the latest version.

A new "Pick Your Poison" phishing campaign tricks users into choosing between having their credentials stolen or infecting their systems with malware. Cofense analysis reveals how this double-edged attack uses files.fm to deliver malicious payloads.

A Trend Micro report explores the evolving tactics of the Russian-speaking cybercriminal underground, including phishing innovations, Web3 scams, the role of ransomware, and the convergence of cyber and physical crime

Invariant Labs reveals a critical vulnerability in the Model Context Protocol (MCP) enabling Tool Poisoning Attacks. Learn how this threat can lead to data exfiltration and AI hijacking

One of the most underrated tools for subdomain finding.

Hey everyone,  My name is Aditya, also known as Enterlectury. I’m a BCA student, and in my free time, I work on improving my bug hunting…

Understand CyberSecurity domains:

This is a brief for the research paper “An Industry Interview Study of Software Signing for Supply Chain Security”, at USENIX Security…

When one hears the phrase “dark web”, it usually evokes visions of illicit transactions, hoodie-wearing hackers, and clandestine…

WhiteRabbitNeo is going to RSAC! Come meet our team at one of the many events we are hosting both inside and outside the Moscone Center

🛡️ Truststore

This guide will focus on developing a tool that can interfere with devices on a network — specifically intercepting data. This part (Part…

The NHL has signed a new multi-year partnership with cybersecurity company Palo Alto Networks to enhance protection across the league…

Oracle has suffered its second reported security breach in a month, with a hacker accessing a legacy system and stealing outdated client…

Photo by CDC on Unsplash

Healthcare data breaches continue to rise in frequency and severity. According to IBM’s 2023 Cost of a Data Breach report, the average…

Host & Network Penetration Testing: Network-Based Attacks CTF 1

Task 1: Introduction