BUG INFO :

MSFTRecon is a powerful tool for red teamers to map Microsoft 365 and Azure infrastructure without authentication, identifying misconfigurations.

Yet Another Testing & Auditing Solution is a simple and easy to use tool to audit your infrastructure for misconfiguration or potential security issues.

Grafana rushed an emergency patch for CVE-2025-4123, a high-severity XSS flaw that was made public. Upgrade now to prevent unauthorized access.

GitLab released urgent updates (18.0.1+) fixing high-severity flaws, including a DoS vulnerability (CVE-2025-0993) and a 2FA bypass (CVE-2024-12093).

A new self-replicating Dero cryptominer is infecting exposed Docker containers, spreading as a worm without needing a C2 server.

NIST introduces the Likely Exploited Vulnerability (LEV) metric, a new way to estimate which CVEs have likely been exploited in the wild.

Critical vulnerabilities (CVSS 9.8) in the Langroid Python framework allow remote code execution in LLM applications. Update to version 0.53.15 now!

Threat actors are using the PyBitmessage protocol as a stealthy C2 channel to hide a Monero coinminer and backdoor, evading detection.

Learn about critical vulnerabilities in LLM-powered Browse agents like Browser Use, allowing domain bypass and prompt injection for data theft.

AutomationDirect's MB-Gateway has a critical (CVSS 10) flaw allowing unauthenticated remote access and RCE. Hardware limits prevent a software fix; replacement is recommended.

Attackers exploit JSONP flaws in Google APIs to inject malicious scripts into e-commerce sites, silently redirecting users to fake payment pages.

Now that we had a product I was finally proud of, the new mission was clear: find a co-packer willing to work with a completely unknown…

No Hacking Course Could Teach Me (My Front Door Did)

Yes, recovery is possible—but it can be a difficult process if you’re handling it alone. I personally deposited a large sum into my Ubitex…

2025年以降、欧州で施行が予定されているCyber Resilience…

Keamanan data menjadi aspek penting dalam dunia digital. Salah satu algoritma populer untuk menjaga kerahasiaan data adalah RSA…

By Aditiya Widodo Putra, Cybersecurity & Blockchain Consultant

By Aditiya Widodo Putra, Cybersecurity & Blockchain Consultant

Todos hemos estado en una situación donde, mirando la pantalla de inicio de sesión, tratamos de recordar qué variación de contraseña se…

ProjectDiscovery revealed critical zero-days (CVSS 10) in Versa Concerto, enabling full RCE and host compromise via auth bypass and Docker escape.