Cisco ClamAV versions 1.4.3 and 1.0.9 fix critical flaws: CVE-2025-20260 (CVSS 9.8) in PDF scanning could allow RCE, and CVE-2025-20234 (UDF) leads to DoS.

A critical flaw (CVE-2025-5071) in WordPress's AI Engine plugin allows subscribers to escalate privileges and take over websites with Dev Tools/MCP enabled.

Cisco warns of a critical flaw (CVE-2025-20271, CVSS 8.6) in Meraki MX/Z Series devices, allowing unauthenticated remote DoS on AnyConnect VPN. Update firmware now!

picoCTF Web Exploitation: SSTI2

Today, I want to share a fascinating story of how I discovered a Remote Code Execution (RCE) vulnerability on a live target. This report walks through every step — from initial recon to full system…

Introduction

Cyber threats often hide in plain sight. Risk assessments serve as the critical tool to detect these threats before they cause damage. By…

A database allegedly containing sensitive information from 10,000 customers of VirtualMacOSX.com was found on a clear web forum by…

In the realm of digital forensics, memory analysis has become a vital technique in exposing stealthy malware. This investigation, conducted…

It’s TopCyberDawg back at it — but this time, I’m stepping out of the SOC and into the offensive side of cybersecurity. While I’ve been…

As anyone who works with me professionally knows, I’m an empiricist at heart. I’m excited to share this recent work on phishing training!

A technical post-mortem examining the limitations of AI-assisted refactoring and the persistent need for human judgment in software…

What happens when your web server becomes a target? Let’s dive into the digital evidence.

Google officially launches Gemini 2.5 Pro for enterprise and introduces the ultra-affordable Gemini 2.5 Flash-Lite, balancing performance, speed, and cost for developers.

Intel is reportedly cutting 15-20% of its wafer foundry workforce, beginning July 2025, to address financial pressures. This impacts up to 11,000 employees.

Windows 11's Recall feature now allows EU users to export snapshots for sharing with third parties, but with strict security measures and a one-time export code.

Unlock Hidden Treasures Inside JS Files: Endpoints, Secrets, API Keys & More! 🪙

Static analysis is just reading the blueprint. Now we kick the door open.

Enumeration

พบมัลแวร์ ClickFix เวอร์ชันใหม่ “LightPerlGirl” แฝงตัวผ่านเว็บไซต์ท่องเที่ยว