Radware Cloud WAF has vulnerabilities (CVE-2024-56523, CVE-2024-56524) allowing attackers to bypass filtering via crafted HTTP requests and special characters.

A sophisticated campaign deployed malicious IIS modules on South Korean web servers, enabling traffic control and backdoor access. Suspected Chinese actor.

Cofense Intelligence reports a new phishing tactic using blob URIs to bypass Secure Email Gateways. Attackers use these local URIs to hide phishing pages.

Netskope Labs details a complex infection chain used by the DOGE Big Balls Ransomware, involving PowerShell scripts, exploits, and lateral movement tactics.

A sophisticated phishing campaign, Oriental Gudgeon, has been targeting Japanese companies since October 2024. It uses advanced cloaking to steal user data.

DieNet, a new hacktivist group, is leveraging DDoS-as-a-service for rapid-fire attacks on critical infrastructure. NETSCOUT reports on their tactics and targets.

Upgrade your bug bounty, pentesting, ctf, etc, skills using these resources

What is XSS and Why It’s One of the Most Dangerous Threats on the Web?

In cybersecurity, not every vulnerability screams “critical.” But in the hands of a skilled attacker, even the smallest flaw can snowball…

Day 25: Mastering Red Team Operations

So, picture this: I’m on a secret mission to find the perfect surprise gift, right? Something that’ll make everyone’s jaw hit the floor. I…

So‘nggi vaqtlarda ko‘plab foydalanuvchilar telefonidan avtomatik tarzda “pul berib tur”, “zarurat bo‘lyapti” kabi xabarlar yuborilganini…

TL;DR: I was just wrapping up my day when an extortion attempt revealed a far deeper conspiracy: North Korean IT workers, state-sponsored…

You’ve just passed security.  You’re early for your flight.  You open your laptop and connect to “Free Airport Wi-Fi.”

A basic guide to setting up and using Burp Suite: proxy, certificate, scope, and key tools for pentesters and web enthusiasts.

Guía básica para configurar y usar Burp Suite: proxy, certificado, scope y herramientas clave para pentesters y entusiastas web.

When was the last time you heard about operating system? 🤔

A quick guide to cyber attacks and who should prevent them — developers, IT teams, or end users.

The Russia-linked threat actor known as COLDRIVER has been observed distributing a new malware called LOSTKEYS as part of an espionage-focused campaign using ClickFix-like social engineering lures.

Greetings all! With all the Network Foundations chapters completed, it is now time to ascend and conduct the Skills assessment. This…

How to Add a Pre-Boot PIN to BitLocker on Windows for Extra Security