The Chinese SilverFox group launched an expansive malware campaign with over 2,800 domains, targeting Chinese-speaking users worldwide with fake sites to exfiltrate data.

Qtap is an eBPF agent that captures pre-encrypted Linux kernel traffic, offering full visibility into TLS/SSL data with minimal overhead for security auditing, debugging, and API development.

Cyble's "Scanception" uses QR codes in PDF lures to bypass enterprise security, shifting attacks to mobile devices to harvest credentials via AITM phishing pages.

Telegram founder Pavel Durov warns of a new extortion wave on the platform, where fraudsters are demanding rare digital assets like usernames and gifts from users.

Kaspersky uncovers a new APT41 cyberespionage campaign targeting African government IT services, showcasing the Chinese group's full TTPs and a strategic geographic pivot.

A new covert cryptomining campaign has compromised over 3,500 websites, silently hijacking visitors' browser resources to mine crypto with virtually no detection.

Turkish experts uncover a large-scale phishing campaign targeting aerospace and defense firms with Snake Keylogger, disguised as TUSAŞ documents, evading detection.

Seqrite Labs exposes UNG0002, a technically adept South Asian APT group using sophisticated social engineering and DLL sideloading to conduct multi-stage cyberespionage campaigns across Asia.

Discover how security misconfigurations expose systems and data. Exploit and protect with this guide!

Two clicks away from total control — HPE’s critical flaw leaves networks wide open.

As the next step in my lab setup, I installed a Kali Linux virtual machine. I selected Kali because it is a widely-used penetration testing…

The quantum era is no longer a distant theory. It is approaching fast, and for blockchain technology, it brings both a threat and a…

After finishing the initial setup, I created the pfSense virtual machine with the following specifications: 512MB of memory, 1 virtual CPU…

Inside the 73-minute attack that destroyed a unicorn startup — and the simple security flaw that could be lurking in your code right now

Podemos comparar um endereço IP ao número da sua casa — é uma forma de identificação. Porém, no contexto de redes, o IP é uma…

The hidden security risks in Python projects and how I fixed them with smart coding practices and libraries.

From electrons to websites on your screen

Dog is a Linux based platform that is rated “easy”. The goal of the machine is to get a user flag and root flag. This machine is great for privilege escalation and post exploitation. I wanted to do…

Cybercriminals are using WAV audio files disguised as voicemail notifications to deliver malware, exploiting trust in corporate brands and bypassing traditional email filters.

Microsoft warns that China-backed APTs (Linen Typhoon, Violet Typhoon, Storm-2603) are actively exploiting critical SharePoint zero-days (CVE-2025-49704, -49706) in unpatched on-premises servers.

CISA, FBI, and HHS issue a joint advisory on Interlock ransomware, active since Sep 2024, targeting businesses and critical infrastructure with double extortion tactics.