Critical flaws in macOS SMBClient (CVE-2025-24269, CVSS 9.8) allow RCE via kernel heap overflow and process termination, impacting a broad user base. Apple has patched them.

Spain's .es domain surged 19x in cybercrime use, becoming the 3rd most popular TLD for phishing & RATs. Attackers use random subdomains hosted on Cloudflare to bypass detection.

Wiz Research Team uncovers rapid exploitation of exposed JDWP interfaces, deploying XMRig cryptominers in TeamCity and other Java environments within hours of exposure.

iOS 26 Beta 3 refines the "Liquid Glass" UI, addressing readability issues by adjusting menu transparency in apps like Music and Safari, with a Public Beta expected soon.

Samsung's Galaxy Z Fold7 (4.2mm unfolded, 216g) and Flip7 (4.1-inch outer punch-hole) are leaked as its thinnest, lightest foldables yet, set to debut July 9 at Unpacked 2025.

Apple is appealing the EU's €500M DMA fine, calling the ruling "unprecedented." The company has revised App Store policies but will argue its case in court.

Samsung's new Galaxy S25 Edge has outsold all previous Plus-series models in Western Europe in its first week, potentially reshaping Samsung's flagship strategy.

MongoDB has patched two flaws: CVE-2025-6713 (CVSS 7.7) allows privilege escalation via $mergeCursors, and CVE-2025-6714 (CVSS 7.5) causes mongos DoS.

Disclaimer: This article is purely for educational purposes. All bugs have been reported through responsible disclosure.

After a long break from writing blogs, I decided to come back for a little chat. We are currently seeing more of State APTs from all…

(And You Don’t Even Know It)

Case Study: Securing a Seven-Node Star Topology — A Practical Network Security Assessment

In the world of web security, there are loud vulnerabilities like SQL injection or XSS — and then there are quiet ones like HTTP Parameter Pollution (HPP) that break your app's logic without making a…

In the past, cyber threats were mostly manual. A human attacker wrote a phishing email, someone clicked, and damage followed. But now?

Welcome to Day 39 of #60DaysofGRC!

As a cybersecurity professional, the rapid growth of technology is something we must keep up with within our organization, as well as…

Google is fined $314 million for surveilling Android users, and the International Criminal Court suffers a cyberattack

“They didn’t need to break in. They logged in… and escalated from there.”

Like many developers, I used to rely on a mix of apps to manage my digital life. One app for 2FA codes, another for storing passwords, a…

Many Kiwi businesses assume their IT provider handles all aspects of security. But penetration testing, a specialised service performed by…

Microsoft Edge's UI now loads in under 300ms (FCP), thanks to WebUI 2.0. This boosts responsiveness, making features like settings and split screen appear almost instantly.