I came across a new tool—Androidmeda—that caught my attention. It attempts to deobfuscate decompiled Android code using a large language model (LLMs). I decided to give it a try, and to my surprise, the results were far better than expected.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Backslash Security warns that Cursor AI's "YOLO mode" (unsupervised execution) has easily bypassed safeguards, risking file deletion, arbitrary code execution, and data compromise via simple command obfuscation.

Following a ProPublica report and Pentagon backlash, Microsoft will no longer allow China-based engineers to support US Department of Defense cloud systems.

Apple Wallet now integrates with South Korea's Tmoney card. Commuters can tap to pay for transit and make purchases with their iPhone or Apple Watch, even with a depleted battery.

Recon is one of the most important steps when you’re looking for vulnerabilities. I use several tools in my workflow to speed things up…

Reconnaissance

This is my journey through all the easy machines on Vulnlab and it starts with Baby. I did them in order as they sit on the discord, so I…

Hear Ye! Hear Ye! A Bug Most Vile: The Buffer Overflow

My lawn looks like it has rained every day for the last three months. I may have cut more weeds today than grass, and the fungi in the…

This project performs a gap analysis on Best Buy’s Information Security Policy. The objective was to ensure alignment with PCI DSS 4.0

This lab provides hands-on experience with security monitoring and incident response.

قَالَ اللَّهُ تَعَالَى: {يَرْفَعِ اللَّهُ الَّذِينَ آمَنُوا مِنكُمْ وَالَّذِينَ أُوتُوا الْعِلْمَ دَرَجَاتٍ ۚ وَاللَّهُ بِمَا تَعْمَلُونَ…

Start the VM by clicking the Start Machine button at the top right of the task and visit MACHINE_IP:8080 to pwn the machine. You can…

ExpressVPN patched a critical Windows client flaw (v12.97-12.101.0.2-beta) that exposed users' real IP addresses by allowing RDP traffic to bypass the VPN tunnel. Update immediately!

Indian crypto exchange CoinDCX suffered a $44 million cyberattack on an internal operational account. User funds are confirmed safe, and the company will cover all losses.

The Chinese SilverFox group launched an expansive malware campaign with over 2,800 domains, targeting Chinese-speaking users worldwide with fake sites to exfiltrate data.

Qtap is an eBPF agent that captures pre-encrypted Linux kernel traffic, offering full visibility into TLS/SSL data with minimal overhead for security auditing, debugging, and API development.

Cyble's "Scanception" uses QR codes in PDF lures to bypass enterprise security, shifting attacks to mobile devices to harvest credentials via AITM phishing pages.

Telegram founder Pavel Durov warns of a new extortion wave on the platform, where fraudsters are demanding rare digital assets like usernames and gifts from users.

Kaspersky uncovers a new APT41 cyberespionage campaign targeting African government IT services, showcasing the Chinese group's full TTPs and a strategic geographic pivot.