A global e-commerce fraud campaign uses thousands of fake retail websites mimicking Apple, Nordstrom, and more, to steal credit card data, with roots tied to Chinese developers.

Cisco warns of a critical flaw (CVE-2025-20309, CVSS 10.0) in ISE and ISE-PIC allowing unauthenticated remote root code execution. Apply patches immediately.

A critical flaw in Android spyware Catwatchful exposed 62,000 user logins and data from 26,000 victim devices, including the admin's info, due to API misconfiguration.

A Chinese student was jailed in London for running a smishing campaign with an "SMS Blaster" hidden in his car, spoofing texts to steal data.

A critical flaw (CVE-2025-6463, CVSS 8.8) in Forminator WordPress plugin allows unauthenticated arbitrary file deletion, leading to site takeover.

By Gouri Sankar

Reflected File Download Bug Hunting & Pentesting

I recently dove into a lab challenge that looked pretty quiet on the surface — but with some methodical digging, a little Burp Suite, and…

In the world of web hacking, Local File Inclusion (LFI) becomes way more dangerous when combined with another common feature: file uploads…

How an overlooked sanitization flaw in Trix Editor enabled persistent XSS attacks with a simple copy-paste — and earned a $1,000 reward

Every time you open an email or plug in a USB drive, your computer could be exposed to a digital disease. Sounds scary? Let’s break it…

You think your Security Operations Center (SOC) is ready for anything?

🔧 Alət: Spiderfoot
🗂 Kateqoriya: Reconnaissance / Host Information / Spiderfoot

In my recent learning journey into the world of cybersecurity, I had the opportunity to develop and implement several foundational tools…

Over the past few weeks, I’ve had the opportunity to dive deep into hands-on cybersecurity projects, transforming theoretical knowledge…

Cybersecurity stands as one of the foundational pillars of the digital world, protecting sensitive information, communications, and…

To solve the lab, log in as the administrator and delete carlos.

To solve the lab, find and exploit a mass assignment vulnerability to buy a Lightweight l33t Leather Jacket. You can log in to your own…

Intial Recon