Matanbuchus 3.0, an enhanced MaaS loader, is bypassing defenses with new C2 protocols, obfuscation, and leveraging Microsoft Teams to deploy ransomware and Cobalt Strike.

A critical "Golden dMSA" flaw in Windows Server 2025's dMSAs allows attackers to compromise KDS root keys, enabling full, undetectable takeover of Active Directory.

A trivial "123456" password and Nexus Stealer malware on a Paradox.ai employee's device exposed data, potentially impacting Fortune 500 clients like Lockheed Martin.

lockc is open source software for providing MAC (Mandatory Access Control) type of security audit for container workloads.

A critical vulnerability (CVE-2025-4919) in Firefox's IonMonkey JIT compiler, demonstrated at Pwn2Own Berlin, allows out-of-bounds memory access, posing a significant risk.

Google's AI agent, Big Sleep, identified and neutralized a critical SQLite zero-day (CVE-2025-6965) that was actively known to threat actors, preventing its exploitation in the wild.

A new study exposes critical architectural flaws in Windows Hello for Business, allowing for biometric bypass and privilege escalation, undermining its passwordless security.

A new attack method demonstrates remote code execution on a secure system by exploiting interactions within a generative AI multi-component pipeline, bypassing traditional vulnerabilities.

Air Serbia is battling an ongoing cyberattack that has crippled internal operations, disrupted payroll, and potentially compromised Active Directory. An infostealer is suspected.

hoaxshell is an unconventional Windows reverse shell, currently undetected by Microsoft Defender and other AV solutions

Misconfigurations in Active Directory Certificate Services (ADCS) can introduce critical vulnerabilities into an Enterprise Active Directory environment, such as paths of escalation from low privileged accounts to domain administrator.

Active Directory Certificate Services (ADCS) is used for public key infrastructure in an Active Directory environment. ADCS is widely used in enterprise Active Directory environments for managing certificates for systems, users, applications, and more.

Hi hackers, Welcome to the latest edition of Bug Bytes! In this month’s issue, we’ll be featuring:  Exploiting Log4Shell (Log4J) in 2025  An indispensable GitHub recon tool (not the one you have in mi...

Imagine a group of toddlers playing in a sandbox. The sandbox has raised walls and soft sand inside, keeping the kids entertained — but…

picoCTF Web Exploitation: Java Code Analysis!?!

What started as a path traversal led to XSS, SSRF, and full account compromise.

Free Link 🎈

“Why tap on screens when you can script your recon?”

“Sometimes, you don’t need to touch the app to break the backend. You just need to know where to look.”

“When your server becomes an attacker’s puppet.”

Secure, anonymous, and fully equipped.