Cybercriminals are once again exploiting the trust users place in popular platforms like GitHub to spread sophisticated malware—this time disguised as free utilities. In its latest threat intellig…

Bug Bounty is a hard way to make money. But neverthless all of us have made this decision already. And fuzzing is the key element for Bug…

A Cadet Corps Case File — Survey Corps Level Threat Hunt

Cybersecurity is a Scam: Unraveling the Subscription Model’s True Colors

https://mattysplo.it/2025/07/14/UCIT.html

Introduction

Why Canada’s Hikvision Ban Signals the Need for Stronger Validation of Surveillance Technology

If you’re starting to rethink letting Gmail read your inbox, chances are you’ve already come across privacy alternatives like ProtonMail…

In an era where cyber threats are becoming more advanced and persistent, organizations need more than just isolated security tools. They…

When the original LEGION penetration testing framework was archived in 2024, the cybersecurity community lost a valuable tool. What started…

Using AI to generate money involves leveraging artificial intelligence to automate tasks, optimize processes, and create new revenue streams. Here are some of the most effective ways to monetize AI…

Follow along in my OSCP journey, this is my target 20 of the TJNULL’s OSCP list.

Spanish police are targeting Google Pixel users running GrapheneOS, a privacy-focused OS, linking it to criminal activity despite its legitimate privacy benefits.

Japanese steel giant Nippon Steel suffered a zero-day cyberattack exposing data of over 100,000 employees, clients, and partners. This is their second breach of 2025.

A critical remote code execution vulnerability (CVSS 10.0) in Wing FTP Server, CVE-2025-47812, is actively being exploited. Update to v7.4.4 immediately!

Jack Dorsey's new decentralized messaging app, Bitchat, faces early security concerns, including identity spoofing and unverified claims, despite its privacy focus.

New research reveals critical vulnerabilities in eSIM technology, allowing cloning and mass surveillance, threatening mobile users and 2FA globally.

A trivial "123456" password and an IDOR flaw in McDonald's McHire system exposed personal data of over 64 million job applicants.

New PerfektBlue flaws in BlueSDK's Bluetooth stack threaten millions of vehicles from Mercedes-Benz, VW, and Skoda, allowing remote code execution.

Discover Ducex, a new packer using advanced encryption and obfuscation to conceal the dangerous Triada Trojan, making it harder to detect on Android devices.

A federal court has sentenced Nicholas Truglia to 12 years for a $20M crypto theft via SIM swapping, escalating his original sentence for restitution failure.