By Aditiya Widodo Putra — Cybersecurity & Blockchain Consultant

To access the machine, click on the link given below:

TryHackMe’s Industrial Intrusion OSINT challenge guide

Jxscout is a new tool for security researchers, analyzing JavaScript code for vulnerabilities. It works with proxies like Burp/Caido, offering beautification, source map discovery, and AST analysis.

A critical flaw (CVE-2025-6328) in D-Link's EOL DIR-815 router allows remote code execution via a stack-based buffer overflow. No patches will be issued.

Citrix Bleed 2 (CVE-2025-5777, CVSS 9.2) is actively exploited to hijack sessions and bypass MFA on NetScaler ADC/Gateway. Patch immediately to prevent covert access and data theft.

Six critical flaws in D-Link's EOL DIR-816 routers are exposed. No patches will be issued; replace device immediately to avoid remote code execution.

Sucuri uncovers a complex multi-stage malware campaign infecting WordPress sites via header.php to deliver a hidden RAT (client32.exe) and evade detection.

Meta AI is testing a feature to access unuploaded photos from your camera roll for content suggestions, sparking privacy concerns despite claims it's opt-in and not for ad targeting

A flaw (CVE-2025-4679) in Synology ABM leaked a static client_secret, allowing unauthenticated attackers read-only access to all Microsoft 365 tenants with ABM installed.

Google launches Doppl, an experimental AI app in the US. It creates personalized digital avatars for virtual try-ons and animated videos of users wearing different outfits.

ASEC uncovers sophisticated attacks targeting South Korean Windows IIS and Linux systems, deploying WogRAT, MeshAgent, and SuperShell for cyber-espionage and lateral movement.

Meta is reportedly in talks to acquire PlayAI, a voice-generation AI startup, to strengthen its AI voice tech and multimodal capabilities, following its Scale AI investment and superintelligence push.

Apple has launched the Swift on Android Workgroup to bring formal Swift support to Android, aiming for seamless cross-platform app development and enhanced tooling.

A new Snake Keylogger campaign exploits an undocumented DLL sideloading technique via jsadebugd.exe to target energy and logistics sectors with fake oil deals.

Google unveils Gemma 3n, a groundbreaking open-source, on-device multimodal AI model. It brings high-end performance to mobile devices via MatFormer architecture and memory optimizations.

Unlock the Secrets to Finding and Fixing This Critical Vulnerability

How to Detect, and Exploit Using Logger++, Burp, and Scripting

Silence the 404s and Unearth Hidden Paths with Smarter Wordlist Strategy

A Deep Dive into Exploiting and Reporting a $1,160 Bounty-Winning IDOR Vulnerability in GitLab’s Machine Learning Model Registry

Unique and super helpful tools in your OSINT journey