By @pastsmartlink — Pioneering ASI for Human Amplification
 Published on July 23, 2025

spraycharles is a low and slow password spraying tool, designed to spray on an interval over a long period of time.

Dell confirms a cybersecurity breach by WorldLeaks (formerly Hunters International) claiming 1.3TB data exfil. Dell asserts compromised data is synthetic test data with "no real value."

Google removed over 11,000 accounts and assets in Q2 2025, primarily targeting coordinated influence operations from China and Azerbaijan across its platforms.

pywhisker allows users to manipulate the msDS-KeyCredentialLink attribute of a target user/computer to obtain full control over that object

Microsoft unveils a new Windows 11 feature easing the transition from Windows 10, enabling swift file and setting transfers between PCs over a local network.

SonicWall SMA 100 series has buffer overflow and XSS flaws (CVSS 6.3-7.3) exploitable by unauthenticated attackers via the web interface. Update to 10.2.2.1-90sv immediately!

Weidmueller IE-SR-2TX series security routers have critical flaws (CVSS 9.8) allowing unauthenticated RCE and buffer overflows, risking industrial automation and critical infrastructure.

TP-Link warns of two critical command injection flaws (CVE-2025-7723, -7724) in VIGI NVRs, allowing remote attackers to execute arbitrary commands, even unauthenticated. Update immediately.

Synology BeeDrive desktop app for Windows has three high-severity vulnerabilities (CVSS 7.5-7.8) allowing local code execution and remote arbitrary file deletion.

CYFIRMA uncovers EdskManager RAT, a sophisticated remote access trojan using HVNC, multi-stage execution, and advanced persistence for covert, long-term system access.

Akamai confirms Coyote, a Latin America-focused banking trojan, is the first malware to exploit Microsoft's UI Automation (UIA) framework in the wild for credential theft.

A critical vulnerability in ASUSTOR's Windows apps, ASUSTOR Backup Plan and EZSync, allows local attackers to gain SYSTEM privileges via unquoted service paths.

Dahua IP cameras are vulnerable to two high-severity buffer overflow flaws (CVE-2025-31700, CVE-2025-31701) allowing remote attackers to crash devices or execute arbitrary code. Update firmware immediately.

18 severe vulnerabilities (CVSS up to 9.8) found in Samsung MagicINFO 9 Server allow RCE, web shell uploads, and auth bypass via hardcoded credentials. Update immediately!

Italian researchers developed "WhoFi," an AI-powered system using Wi-Fi signal reflections from the human body to identify individuals with 95.5% accuracy, even without devices.

Windows 11 24H2's new KB5062660 update introduces "Quick Machine Recovery" for automatic system fixes and a faster, redesigned Black Screen of Death.

Hello bug hunters,

.بسم الله والصلاة والسلام على خير خلق الله، سيدنا محمد صلى الله عليه وسلم

Both Validation and Sanitization are important when we think of application security. Let’s take a look at why that is.

I watched a movie recently. One of those “tech dystopias” starring Emma Watson — yes, she’s petite, impossibly so — playing an…