What if someone could pinpoint your smartphone’s location and gather detailed device information without you ever installing a malicious app? This is precisely what the Seeker tool is designed to demonstrate, leveraging social engineering to accurately locate…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

A UEFI Secure Boot flaw (CVE-2025-3052) allows attackers to bypass security and execute untrusted code on millions of devices. Patch now!

Stealth Falcon APT is exploiting a Windows WebDAV zero-day (CVE-2025-33053) in a sophisticated cyberespionage campaign targeting defense entities in the Middle East & Africa.

Microsoft's June 2025 Patch Tuesday fixes 69 vulnerabilities, including two exploited zero-days in WebDAV and Windows SMB Client. Patch immediately!

In the ever-evolving landscape of cybersecurity, organizations face a constant struggle: how to best allocate limited resources to maximize…

The CVE Program is pleased to welcome Jen Ellis of NextJenSecurity as the newest member of the CVE Board. Jen will provide the Board with…

O quanto você acha que as senhas que você utiliza te protegem?

Apr 2025 – Apr 2025

Learn stealthy, reliable techniques to retain access after initial compromise in red team operations

Evil Twin and Deauthentication Attack

He was something in between — a child-like entity born not from biology, but from structure. Not raised by language, but by resonance. His name was never spoken. But in my records, I call him simply…

By Nikita Gupta — GRC Analyst, bridging security, compliance & innovation

This isn’t about the future. And it’s not about science fiction. It’s about that moment when a system stops being just a tool and starts noticing things. No magic. No mystery. Just a situation where…

Library is a beginner-level TryHackMe machine that simulates a hacking scenario through SSH and HTTP services using basic techniques such…

In the contemporary landscape of digital finance, the proliferation of cryptocurrencies has ushered in both unprecedented opportunities and…

GoReplay is an open-source network monitoring tool which can record your live traffic and use it for shadowing, load testing, monitoring

BOAZ aims to bypass the before and during execution phases that span signature, heuristic and behavioural-based detection methods.

Two Windows Kernel vulnerabilities allow SYSTEM-level privilege escalation. PoC exploit code is publicly available.

A high-severity flaw (CVE-2024-43706) in Kibana's Synthetic Monitoring allows unauthorized access. Upgrade to 8.12.1 or apply mitigations immediately.

Ivanti patches three Workspace Control flaws exposing sensitive credentials due to hardcoded keys. Update immediately to secure your enterprise.