A critical flaw (CVE-2025-7503, CVSS 10.0) in Shenzhen Liandian IP cameras allows root access via an undocumented, default-enabled Telnet service with hardcoded credentials. No patch available.

GMX was hacked for $40M via smart contract exploit. The hacker returned funds for a $5M bounty after GMX's on-chain appeal, sparking debate in the security community.

Evalian uncovers a phishing campaign spoofing Red Bull job offers using legitimate services, low-cost VPS, and "slow kill" tactics to steal credentials via fake Facebook logins.

The DFIR Report uncovers a new PHP-coded Interlock RAT variant, using compromised websites and ClickFix social engineering to deploy stealthy malware for recon and persistence.

SpaceX invests $2B in xAI to accelerate Grok AI development and Tesla integration. Grok 4 offers multimodal input/multi-agent support, but faced recent hate speech controversy.

Ever wondered if a simple OAuth misconfiguration could hand over access to a dashboard? Spoiler: it can — and it did.

Introduction 🚀

Intro: Quantum is weird, and that’s the point

“Attackers don’t just exploit systems.  They exploit assumptions.”

Hey there, fellow security enthusiasts! Ever wanted to dive into web vulnerabilities in a hands-on way? The Over The Wire Natas wargame is…

An Analysis of Alberto Daniel Hill, The Cybermidnight Club Podcast, and the Twitter Spaces Engine

By Md Shafiqul Baten Sumon

By Md Shafiqul Baten Sumon

You’ve seen it a hundred times this week alone. A banner pops up the moment you land on a site: “We use cookies to enhance your experience…

In the race to adopt artificial intelligence (AI) and machine learning (ML), many organizations are rapidly building, deploying, and…

Lab: SSRF

Beware of “blame the vendor” distractions.

Siguiendo con los laboratorios de control de acceso, es importante destacar que algunas aplicaciones pueden manejar atributos privilegiados…

Preface:

بسم الله الرحمن الرحيم