In today’s digital world, nearly everything is connected to the internet — from phones and TVs to banks, hospitals, and even refrigerators. With this convenience comes a risk: the possibility of…

Artificial Intelligence systems have begun to be used across all sectors and fields today. Autonomous systems powered by decision-support…

Your essential roadmap to protecting Kubernetes environments from modern threats in 2025.

SOC Lab Topology

The evolving landscape of vulnerability intelligence demands more than CVE monitoring — discover how to build a resilient, multi-source…

How business teams are building their own “governance” — and what auditors must do about it.

The Atomic macOS Stealer (AMOS) has undergone a significant and concerning evolution, now incorporating a persistent backdoor into its capabilities. Previously known primarily for its role as a data…

The word security has become a global buzzword in today’s world. Every company wants to secure their products, services, and other assets…

Writeup for Jurassic Park CTF.

Binary number system and logical addressing

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

GPOHound analyzes GPOs in Active Directory for misconfigurations and privilege escalation paths, integrating with BloodHound for enhanced security insights.

Huntress witnessed active exploitation of a critical RCE flaw (CVE-2025-47812) in Wing FTP Server, allowing root/SYSTEM access via null byte injection and Lua code execution.

Juniper warns of a critical flaw (CVE-2025-52950, CVSS 9.6) in Security Director 24.4.1, allowing unauthenticated attackers to read or tamper with sensitive resources. Update immediately.

Synacktiv reveals Laravel’s APP_KEY vulnerability allows RCE via deserialization attacks when the key is leaked or guessable, risking full application compromise.

SentinelOne uncovers a new macOS.ZuRu variant using a trojanized Termius app. It gains persistence via LaunchDaemon and deploys a Khepri C2 beacon for remote control.

SafePay, a new centralized ransomware group linked to LockBit 3.0, has hit 200+ MSPs/SMBs via RDP. It bypasses Defender, encrypts files, and exfiltrates data using WinRAR and FileZilla.

DoNot APT (APT-C-35) expands its cyber-espionage to a European foreign affairs ministry, using spear-phishing with Google Drive links to deliver the LoptikMod backdoor.

Iranian-backed "Pay2Key.I2P" ransomware resurfaced on I2P, offering 80% profit for attacks on Western targets. Linked to Fox Kitten & Mimic, it merges cybercrime with geopolitical motives.

A flaw in Helm (CVE-2025-53547, CVSS 8.5) allows local code execution when updating dependencies via a malicious Chart.yaml and symlinked Chart.lock file

Protege tus Datos. Descubre y Mitiga las Vulnerabilidades Criptográficas Más Críticas.