They don’t knock. They sneak in. Here’s how they’re made, line by line.

In this article I will be explaining how I used Wireshark to analyze a packet capture containing traffic of a malicious “Google…

O SHA-256 é um algoritmo que gera a impressão digital de um arquivo. É possível pesquisar pelo código SHA-256 sem que tal arquivo seja…

At Strategic All-Source Intelligence Agency, our analysts have spent years on the front lines of intelligence, cybersecurity, and risk…

Compliance is not the same as security. Many companies confuse the two, leaving them vulnerable to exploitation. Meeting regulations can…

I recently stumbled upon Shounak Das’ post here on LinkedIn, which led me to discovering this project and trying it out for myself — and…

Overview

A critical zero-day (CVE-2025-54309) in CrushFTP, stemming from improper AS2 validation, is actively exploited, granting unauthenticated admin access. Update immediately if no DMZ proxy is used.

Cisco warns of active exploitation for three critical ISE flaws (CVSS 10.0), allowing unauthenticated RCE and full system control. Update ISE 3.3 and 3.4 immediately!

Firefox v141.0 rolls out with new AI-powered tab grouping that keeps your data local, significant memory optimizations for Linux, and WebGPU support for Windows users.

GitHub now allows users to sign in and create new accounts using their Google credentials, offering a streamlined login experience for developers.

Kubernetes warns of CVE-2025-7342 (CVSS 8.1) in Image Builder. Default credentials in Windows VM images (Nutanix/OVA) allow unauthenticated root access to clusters. Patch immediately!

The UK government has signed an MoU with OpenAI, focusing on AI infrastructure, safety research, and public sector integration to accelerate its national AI agenda.

So yeah… I got hit with a duplicate.

Old but still a gold

I’ve curated five awesome CTF challenges that are perfect for diving into ethical hacking, even if you’re just starting out. These will…

When you leave your house door unlocked. A thief walks in and takes your stuff. Likewise in the digital world, that unlocked door is called…

👋 Who Am I?  I’m Mihir Sathvara, aka TraceX0 — a cybersecurity enthusiast and web security researcher. I love exploring web application…

Hi all! Today we’ll be solving the first OS command injection lab of the Portswigger Web Security Academy. Let’s see the lab description…

For years, we built digital fortresses around our networks. But the battlefield has been completely reshaped by a new, transformative…