Earlier this year I passed HTB’s CAPE exam, I’ve condensed all my thoughts about this certification & more…

Advanced Static Analysis | Part 4

In this article, we’re going to explore the retired easy box of Blue, following the guided mode.

O Postman é uma ferramenta extremamente popular entre desenvolvedores para testar APIs e facilitar a colaboração em ambientes de…

Sara uses netmiko to remotely connect via SSH to RouterOS devices. It executes RouterOS system commands to extract configuration data and analyze it

on a target machine and then being able to execute this script to then stealthily execute arbitrary binaries is very useful from an anti-forensic

A critical pre-authentication RCE vulnerability in vBulletin 5.x and 6.x allows full server compromise. A PoC exploit is available.

A critical WSO2 vulnerability (CVE-2024-6914, CVSS 9.8) allows unauthenticated account takeover via a SOAP service, including admin access.

A high-severity vulnerability (CVSS 9.4) in Sony SNC-series cameras allows remote admin access due to hard-coded default credentials. PoC exists.

TA-ShadowCricket (formerly Shadow Force), a China-linked group, has been active for over a decade, targeting Asia-Pacific government and enterprise networks.

A new malware family, DOUBLELOADER, leverages the ALCATRAZ obfuscator to deploy RHADAMANTHYS infostealer with advanced evasion techniques.

An active npm malware campaign uses over 60 packages to steal internal/external IP addresses, hostnames, and user paths, designed for enterprise network mapping.

Russian-aligned TAG-110 (APT28) is launching a cyber-espionage campaign using macro-enabled Word docs to target Tajikistan's public sector for intelligence.

An unauthenticated flaw in GNOME's remote desktop (CVE-2025-5024) allows attackers to repeatedly crash Linux environments, preventing recovery even after systemd restarts.

The alleged architect of the Qakbot malware empire, Rustam Rafailevich Gallyamov, has been indicted, facing charges and a $24M crypto seizure.

Over 40 malicious Chrome extensions, disguised as legitimate tools, are stealing cookies, logins, and impersonating users, many still live on the Web Store.

The "ClickFix" campaign tricks users with fake CAPTCHAs, leading them to paste malicious commands into the Windows Run dialog, delivering infostealers.

So basic concept first. Can I send friend requests from your Facebook Account? Or block someone from your account? No, right? This magic…

By me, Cybersecurity Enthusiast | Ethical n00b | AppSec Researcher aka nub

Massive Data Breach Exposes Millions of Logins from Google, Microsoft, and Tiktok

Guía práctica de introducción a Splunk: indexación, búsquedas, SPL, roles, alertas, dashboards y comandos clave.