Ads… the uninvited guests of the internet, always popping up when you least want them. Learn to block them for FREE! ⛔

Welcome to my writeup where I am gonna be pwning Lazy Admin from TryHackMe. This challenge has two flags, and our goal is to capture both…

Hobbits is a software platform for analyzing, processing and visualizing bits. The Hobbits GUI is the central tool of the platform

create structured and unstructured data stores of as much operational data as possible to help guide future research and facilitate offensive data analysis

A vulnerability (CVE-2024-53141) in the Linux kernel's ipset component allows for privilege escalation and kernel-level code execution.

Hitachi Vantara addresses a critical resource injection vulnerability (CVE-2025-0756) in Pentaho Data Integration & Analytics, enabling RCE.

Kaspersky reports the resurgence of IronHusky APT, deploying an evolved MysterySnail RAT in espionage campaigns.

Siemens patches 66 SQL injection vulnerabilities in TeleControl Server Basic, urging users to upgrade and restrict access.

Unit 42 uncovers a sophisticated phishing campaign using multi-layered tactics to deliver malware like Agent Tesla, evading detection.

HarfangLab analysis details Gamaredon's PteroLNK malware, revealing its stealthy tactics and infrastructure used for espionage.

Prodaft analysis reveals Gorilla, a new Android malware evolving to steal data and potentially conduct espionage.

Sekoia TDR reveals Interlock ransomware's evolving tactics, including ClickFix social engineering, to evade detection and steal data.

A new report by threat intelligence platform Hunt.io has revealed a stealthy and persistent phishing campaign that leverages server-side logic to evade detection and steal credentials from employe…

SVG XSS → CSRF → Admin Takeover in Krayin CRM.

Decoding the Fractal Intelligence Network Before It’s Sealed by the System

Handy tools in your Osint journey.

Cyber attacks now pose a major threat to individuals, companies, and even countries. From data theft to crippling critical infrastructure…

A Candid Interview with ‘Tre’

This is an unofficial guide to analyzing the SOC125 — EventID 58 — Suspicious Rundll32 Activity

Prompt injection tricks AI into ignoring its instructions. Learn how to detect and block it

Privacy risks and demands will continue to rise in our AI powered world, as AI systems hunger for access to data and create content that…