A vulnerability (CVE-2024-27876) in Apple's libAppleArchive allows arbitrary file writes and can bypass Gatekeeper on macOS and iOS. Patches are available.

Power Parasites targets users with job and investment scams using fake domains mimicking Siemens, Repsol, Netflix, and more, Silent Push reports.

A new phishing campaign targets WooCommerce users with fake security alerts. Learn how attackers use IDN homographs and malicious plugins to compromise stores.

Trellix analysis reveals Lumma Stealer's latest tactics: code obfuscation, API hashing, ETW evasion, anti-VM. Learn how this InfoStealer avoids detection.

Kimsuky revives PebbleDash malware using spear-phishing and patched RDP DLLs for stealthy access and control, warns new ASEC March 2025 report.

Cisco Talos uncovers ToyMaker's IAB activity, paving the way for Cactus ransomware. Learn how LAGTOY backdoor & credential theft led to a major breach.

Stop hunting bugs — discover private bounty programs instead!

hi semua, kembali lagi. pada artikel ini saya akan membagikan kepada kalian bagaimana saya mendapatkan informasi sensitif dari situs…

Beneficial tools in your OSINT journey.

Hello and welcome to my walkthrough for SwagShop on Hack The Box, SwagShop is a Linux box rated at an easy difficulty. In this walkthrough I will do my best to explain things deeply to help beginners…

There are two primary teams discussed in simulations and exercises: Blue Teams and Red Teams. While Blue Teams work on defending systems…

Introduction

Hey everyone! Today I want to talk about vulnerabilities in cybersecurity. This is the first post in a series where I’ll be exploring…

What if the biggest cyber threat to your organization doesn’t come from the outside, but from your trusted partners? Digital supply chains…

SQL injection (SQLi) is a common web vulnerability that allows attackers to interfere with an application’s database by injecting malicious…

Introduction: The Digital Ninja Mindset

Grandma’s “Free Prize” Win

TL;DR walkthrough of the TryHackMe Reset room (https://tryhackme.com/room/resetui).

CVE-2025-31324 lets attackers exploit SAP NetWeaver to upload webshells and deploy C2 tools like Brute Ratel, affecting patched enterprise systems.

Hey hunters, I’m new here and this is my first vulnerability, even though it has no bounty.

Whenever we hit a website or web application, we simply trust the browser to verify its authenticity and establish a secure, encrypted…