ASEC exposed Cephalus, a Go-based RaaS group attacking RDP. The malware uses VirtualLock, XOR encryption, and a fake AES key pattern to severely complicate memory and forensic analysis.

Security researchers at AhnLab have identified Yurei, a newly emerging ransomware group first observed in early September 2025. The group operates with a classic double-extortion model, infiltrati…

Di era digital tahun 2025, kalimat klise “keberuntungan adalah saat persiapan bertemu kesempatan” telah berevolusi. Hari ini, keberuntungan…

By: Jason Reaves

Well most people would argue that every Hackaday article is interesting, and I do like to browse from time-to-time, but sometimes I get…

Well most people would argue that every Hackaday article is interesting, and I do like to browse from time-to-time, but sometimes I get…

Web reconnaissance is the foundation of any successful security assessment. Whether you’re hunting bugs or conducting a full penetration…

Critical Fiber framework vulnerability CVE-2025-66630 (CVSS 9.2) causes silent UUID failures, leading to session hijacking. Update to v2.52.11 now.

Intro

Socket uncovers a malicious Go module mimicking golang.org/x/crypto. It steals passwords via ReadPassword and deploys the Rekoobe backdoor on Linux systems.