I recently stumbled upon Shounak Das’ post here on LinkedIn, which led me to discovering this project and trying it out for myself — and…

Overview

A critical zero-day (CVE-2025-54309) in CrushFTP, stemming from improper AS2 validation, is actively exploited, granting unauthenticated admin access. Update immediately if no DMZ proxy is used.

Cisco warns of active exploitation for three critical ISE flaws (CVSS 10.0), allowing unauthenticated RCE and full system control. Update ISE 3.3 and 3.4 immediately!

Firefox v141.0 rolls out with new AI-powered tab grouping that keeps your data local, significant memory optimizations for Linux, and WebGPU support for Windows users.

GitHub now allows users to sign in and create new accounts using their Google credentials, offering a streamlined login experience for developers.

Kubernetes warns of CVE-2025-7342 (CVSS 8.1) in Image Builder. Default credentials in Windows VM images (Nutanix/OVA) allow unauthenticated root access to clusters. Patch immediately!

The UK government has signed an MoU with OpenAI, focusing on AI infrastructure, safety research, and public sector integration to accelerate its national AI agenda.

So yeah… I got hit with a duplicate.

Old but still a gold

I’ve curated five awesome CTF challenges that are perfect for diving into ethical hacking, even if you’re just starting out. These will…

When you leave your house door unlocked. A thief walks in and takes your stuff. Likewise in the digital world, that unlocked door is called…

👋 Who Am I?  I’m Mihir Sathvara, aka TraceX0 — a cybersecurity enthusiast and web security researcher. I love exploring web application…

Hi all! Today we’ll be solving the first OS command injection lab of the Portswigger Web Security Academy. Let’s see the lab description…

For years, we built digital fortresses around our networks. But the battlefield has been completely reshaped by a new, transformative…

On July 18, 2025, cybersecurity researchers uncovered a dangerous new zero-day vulnerability in Microsoft SharePoint Server, actively…

NOTE: This Investigative Report does not include the data of advisories provided by Microsoft, Eye Security or Palo Alto Networks; however…

How much secure are the CI/CD pipelines that deliver your software? What happens when these tools designed to speed up development becomes…

For my own sanity, I am creating this guide to install Windows 11 on VMware Workstation Pro. My hope is that it will benefit others as…

When a synchronized cyber activation hits, the strength of a nation’s response is determined not just by its defenses, but by its ability…