A simple demonstration of a Path Traversal vulnerability from PortSwigger’s Web Security Academy.

Durante um dos experimentos no meu laboratório de segurança experimental, me propus um desafio: comprometer uma máquina na DMZ e girar para

In this write-up, I’ll walk you through how I rooted the LinkVortex box. Let’s get started!

The shocking reality: Even Microsoft 365’s multi-factor authentication can be bypassed by sophisticated phishing tools

Let’s Defend is an interactive, hands-on training platform focused on Blue Team (defensive cybersecurity) operations. It simulates a…

Let’s Defend is an interactive, hands-on training platform focused on Blue Team (defensive cybersecurity) operations. It simulates a…

Let’s Defend is an interactive, hands-on training platform focused on Blue Team (defensive cybersecurity) operations. It simulates a…

How to secure critical industrial control systems against evolving cyber threats.

What I learned after testing the AI designed to outsmart humans and why printing its responses changed everything.

What is Microsoft Dedender XDR

Hər kəsə salam,Bu məqalədə HackTheBox-dakı Server-Side Attacks modulundakı Skills Assessment hissəsini edib,əlimdən gəldiyi qədər izah…

NativeDump is a new tool for stealthy LSASS process dumping using only NTAPIs, bypassing EDRs to extract credentials for tools like Mimikatz or Pypykatz.

Intel has officially discontinued Clear Linux, its high-performing Linux distribution, as part of cost-cutting. Users are urged to migrate immediately.

The Akira ransomware group intensified attacks, adding 12 new companies to its leak site in 3 days, using double extortion to steal and encrypt data from diverse global industries.

VulnCheck reveals a new Linuxsys cryptominer campaign exploiting Apache HTTP Server CVE-2021-41773 and other critical flaws to deploy malware, including the Lcrypt0rx ransomware.

Sophos has patched three high-severity LPE vulnerabilities in Intercept X for Windows (CVE-2024-13972, CVE-2025-7433, CVE-2025-7472), allowing local users to gain SYSTEM privileges.

A critical RCE (CVE-2025-54068) in Livewire v3.6.3 and earlier allows unauthenticated attackers to execute arbitrary code on millions of Laravel applications. Update now!

Scanception campaign uses QR code-based phishing in PDFs to bypass traditional security, targeting high-value industries globally for credential and 2FA theft.

Katz Stealer is a dangerous MaaS info-stealer (starting at $100/month) that plunders digital identities, evades detection with stealthy techniques, and targets a vast array of sensitive data.

A Windows CLFS zero-day (CVE-2025-29824) actively exploited by RansomEXX and Play ransomware gangs for privilege escalation, with a public PoC. Patch now!

Matanbuchus 3.0, a new sophisticated malware loader, is using social engineering via Microsoft Teams to infiltrate enterprise systems with advanced evasion tactics.