In the ever-evolving landscape of cybersecurity, traditional perimeter-based security approaches are proving to be inadequate in protecting…

In the previous article, we have exploitation of the Mercury machine now in this video we will do post-exploitation Let’s Begin

In the ever-evolving landscape of cybersecurity, traditional perimeter-based security approaches are proving to be inadequate in protecting…

Endpoint Detection and Response (EDR) and Vulnerability Management (VM) are two prominent tools in an organization’s cybersecurity arsenal…

Today we will exploit an FTP (file transfer protocol) service on a linux machine here we will use the metasploitable2 for this lab let’s…

NAKIVO is joining forces with Arkanet to bring the latest in data protection and cybersecurity directly to your city in a 3-day roadshow:

Concept/Overview

Citrix has patched high-severity flaws in XenServer VM Tools for Windows that could allow attackers to compromise guest VMs. Update to version 9.4.1.

macOS 26 introduces ASIF, a new sparse disk image format for Apple Silicon, dramatically improving VM read/write speeds and storage efficiency

Ever looked at Docker and thought, “Is this a ship? A whale? A fridge that runs code?”

I recently wrapped up Lab 3 of my hands-on cybersecurity learning journey, and let’s just say: it definitely took longer than expected.

A critical integer overflow in VirtualBox (CVE-2025-30712) allows an attacker to escape the VM and execute code on the host, with a public proof-of-concept available.

By Lovelesh Gangil (@loveleshgangil )

A Critical (CVSS 9.4) flaw in Happy DOM allows untrusted JavaScript to escape the Node.js VM context and achieve RCE on the host system via the Function inheritance chain.

SonicWall patched a critical flaw (CVE-2025-40604) in its Email Security appliances. The bug allows persistent RCE by exploiting a lack of integrity checks when loading the root filesystem image from the VM datastore.

In a new report, the Huntress Tactical Response Team details a sophisticated intrusion discovered in December 2025 where threat actors successfully executed a “VM escape”—breaking out …

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Virtual machines are often perceived as impenetrable bastions for risk assessment, operating under the assumption that the host

Urgent: Apache CloudStack patches critical flaws (CVE-2026-25199, CVE-2026-25077) enabling VM hijacking and KVM host RCE. Secure your cloud environment now.

Starting a journey into technology and cybersecurity can feel like stepping into a maze. When I first began I was overwhelmed by terms…