Telegram founder Pavel Durov warns of a new extortion wave on the platform, where fraudsters are demanding rare digital assets like usernames and gifts from users.

Kaspersky uncovers a new APT41 cyberespionage campaign targeting African government IT services, showcasing the Chinese group's full TTPs and a strategic geographic pivot.

A new covert cryptomining campaign has compromised over 3,500 websites, silently hijacking visitors' browser resources to mine crypto with virtually no detection.

Turkish experts uncover a large-scale phishing campaign targeting aerospace and defense firms with Snake Keylogger, disguised as TUSAŞ documents, evading detection.

Seqrite Labs exposes UNG0002, a technically adept South Asian APT group using sophisticated social engineering and DLL sideloading to conduct multi-stage cyberespionage campaigns across Asia.

Discover how security misconfigurations expose systems and data. Exploit and protect with this guide!

Two clicks away from total control — HPE’s critical flaw leaves networks wide open.

As the next step in my lab setup, I installed a Kali Linux virtual machine. I selected Kali because it is a widely-used penetration testing…

The quantum era is no longer a distant theory. It is approaching fast, and for blockchain technology, it brings both a threat and a…

After finishing the initial setup, I created the pfSense virtual machine with the following specifications: 512MB of memory, 1 virtual CPU…

Inside the 73-minute attack that destroyed a unicorn startup — and the simple security flaw that could be lurking in your code right now

Podemos comparar um endereço IP ao número da sua casa — é uma forma de identificação. Porém, no contexto de redes, o IP é uma…

The hidden security risks in Python projects and how I fixed them with smart coding practices and libraries.

From electrons to websites on your screen

Dog is a Linux based platform that is rated “easy”. The goal of the machine is to get a user flag and root flag. This machine is great for privilege escalation and post exploitation. I wanted to do…

Cybercriminals are using WAV audio files disguised as voicemail notifications to deliver malware, exploiting trust in corporate brands and bypassing traditional email filters.

Microsoft warns that China-backed APTs (Linen Typhoon, Violet Typhoon, Storm-2603) are actively exploiting critical SharePoint zero-days (CVE-2025-49704, -49706) in unpatched on-premises servers.

CISA, FBI, and HHS issue a joint advisory on Interlock ransomware, active since Sep 2024, targeting businesses and critical infrastructure with double extortion tactics.

Proofpoint reveals a surge in RFQ scams where fraudsters impersonate procurement officials to steal high-value goods by exploiting Net 15/30/45 financing terms.

Google released an urgent Chrome update fixing two high-severity type confusion vulnerabilities (CVE-2025-8010, CVE-2025-8011) in its V8 JavaScript engine. Update immediately!

Weeks after a major takedown, Lumma Stealer has resurfaced with new stealth tactics, exploiting cracked software, fake CAPTCHAs, and GitHub to resume its credential-stealing operations.