A preauth DoS flaw in Windows Deployment Services allows attackers to crash systems via spoofed UDP packets, warns researcher Zhiniang Peng.

A critical XXE vulnerability (CVE-2025-2905) in WSO2 API Manager allows attackers to read files and cause DoS. Patch WSO2-2016-0151 is the solution.

A critical vulnerability (CVE-2025-2605) in Honeywell MB-Secure alarm panels allows attackers to execute OS commands. Update to the latest version now.

mnemonic exposes Darcula, a global phishing-as-a-service network using the Magic Cat toolkit to target mobile users with encrypted, real-time scam dashboards.

CERT/CC warns of CVE-2025-3927 in Digigram PYKO-OUT AoIP device, where default no-password access allows attackers to control devices and pivot networks.

A large-scale supply chain attack has injected backdoors into e-commerce software, potentially affecting 500-1,000 stores. Sansec urges immediate checks.

DragonForce ransomware cartel targets UK retailers with Conti-based payloads, RansomBay leaks, and phishing attacks, warns SentinelOne report.

IBM patches CVE-2024-51466 and CVE-2024-40695 in Cognos Analytics to prevent system compromise, sensitive data leaks, and remote code execution.

Initial Reconnaissance

In the modern cybersecurity landscape, data is everywhere — but context is power.

Descubre como ganar acceso a la máquina Lame de HTB con explicaciones simples.

The digital realm, once a frontier of boundless opportunity, has become a battleground. In 2025, the stakes are higher than ever, with…

Mobile apps are omnipresent — from social media and enterprise to payment wallets. But most are still open to attack. This handbook is…

And we are back for another quick Network Foundations chapter from the Hack The Box Academy. In this chapter, Wireless Networks are…

Even small businesses are vulnerable to serious cybersecurity threats. From phishing emails to ransomware attacks, hackers are always in…

The development of autonomous vehicles (AVs) has been one of the most revolutionary advances in modern transportation. With promises of…

Hello Everyone. Today we are going to be doing a walkthrough on the challenge listed above. We will start by unzipping the mft.zip file in…

Hello everyone! In this blog post, we are going to go over the lab questions for the Internet Architecture chapter of the Hack The Box…

Hackers are partying with 19 billion stolen passwords — here’s how you can slam the door in their face.

In April 2024, a significant cybersecurity operation led by the FBI uncovered and dismantled one of the most notorious phishing-as-a-service (PhaaS) platforms: LabHost. This takedown, which involved…

A major shift is happening in the world of cybersecurity, one that challenges the long-standing belief that MacOS is inherently safer than its Windows counterparts. Recent intelligence has revealed a…