A new "Pick Your Poison" phishing campaign tricks users into choosing between having their credentials stolen or infecting their systems with malware. Cofense analysis reveals how this double-edged attack uses files.fm to deliver malicious payloads.

A Trend Micro report explores the evolving tactics of the Russian-speaking cybercriminal underground, including phishing innovations, Web3 scams, the role of ransomware, and the convergence of cyber and physical crime

Invariant Labs reveals a critical vulnerability in the Model Context Protocol (MCP) enabling Tool Poisoning Attacks. Learn how this threat can lead to data exfiltration and AI hijacking

One of the most underrated tools for subdomain finding.

Hey everyone,  My name is Aditya, also known as Enterlectury. I’m a BCA student, and in my free time, I work on improving my bug hunting…

Understand CyberSecurity domains:

This is a brief for the research paper “An Industry Interview Study of Software Signing for Supply Chain Security”, at USENIX Security…

When one hears the phrase “dark web”, it usually evokes visions of illicit transactions, hoodie-wearing hackers, and clandestine…

WhiteRabbitNeo is going to RSAC! Come meet our team at one of the many events we are hosting both inside and outside the Moscone Center

🛡️ Truststore

This guide will focus on developing a tool that can interfere with devices on a network — specifically intercepting data. This part (Part…

The NHL has signed a new multi-year partnership with cybersecurity company Palo Alto Networks to enhance protection across the league…

Oracle has suffered its second reported security breach in a month, with a hacker accessing a legacy system and stealing outdated client…

Photo by CDC on Unsplash

Healthcare data breaches continue to rise in frequency and severity. According to IBM’s 2023 Cost of a Data Breach report, the average…

Host & Network Penetration Testing: Network-Based Attacks CTF 1

Task 1: Introduction

If you’re anything like me and absolutely can’t stand using Chisel, you’re in luck — I’ve put together a quick guide on how to use my…

Disclaimer: All URLs and service names have been redacted for security reasons, as the vulnerability is still unpatched at the time of…

Introducing Stifle, an extremely simple .NET post-exploitation utility that uses a passed certificate to set explicit certificate mapping on a target object

SRUM Dump extracts information from the System Resource Utilization Management Database and creates a Excel spreadsheet.