A new npm supply chain attack, "xlsx-to-json-lh," uses typosquatting to enable remote code execution, silently awaiting a "kill switch" to delete project directories.

Netskope reveals a surge in phishing on Glitch, abusing the platform to bypass MFA and steal credentials, mainly targeting Navy Federal Credit Union members.

Learn how interactive sandboxes like ANY.RUN can detect and analyze Microsoft 365 phishing attacks in real-time, preventing silent breaches and data exfiltration.

A sophisticated malware campaign targets Korean Internet cafés with Gh0st RAT and CoinMiner, hijacking systems for crypto mining. ASEC urges immediate action.

Kaspersky's Q1 2025 report highlights a surge in attacks on aging systems, unpatched flaws, and mismanaged updates, urging vigilance and prompt action.

Intrinsec exposes BtHoster, a bulletproof hosting provider behind widespread scanning and malware, revealing its network of shell companies and evasion tactics.

CISA warns of a critical vulnerability (CVE-2025-1907) in Instantel Micromate devices, allowing unauthenticated remote command execution. Immediate action is advised.

CISA adds 5 new exploited vulnerabilities to KEV, including flaws in ASUS routers, Craft CMS, and ConnectWise. Urgent patching required!

A new ransomware strain, Lyrix, targets Windows systems with strong encryption, anti-analysis, and data destruction techniques. Learn how to protect your data.

Learn how to use Katana to discover hidden routes and endpoints. This is the perfect guide for beginners in Bug Bounty.

It’s a mistake. A big, stupid, unforgettable mistake….

At the moment LLMs are becoming increasingly more powerful everyday. Even hallucinations (errors) are diminishing at a good pace and…

Docker telah menjadi teknologi containerization yang sangat populer di kalangan developer dan DevOps engineer. Namun, dengan semakin…

Testing a web application for vulnerabilities helps identify weaknesses that malicious actors could exploit. As a penetration tester, it is…

Ethical hacking isn’t just about breaking into systems — it’s about doing it for the right reasons. Security is something we all depend on, whether we realize it or not. I’ve decided to step into the…

The rise of connected medical devices, from pacemakers and insulin pumps to wearable monitors, has brought life-saving benefits to modern…

By Aditiya Widodo Putra Cybersecurity & Blockchain Consultant

Recon

Why modern cybersecurity architecture and emotional survival both require one thing: never assuming you’re safe.

A critical CVSS 10.0 vulnerability (CVE-2025-5086) in DELMIA Apriso threatens global manufacturing. Urgent action needed to protect production.

📌Free Article Link