Microsoft unveils a new Windows 11 feature easing the transition from Windows 10, enabling swift file and setting transfers between PCs over a local network.

SonicWall SMA 100 series has buffer overflow and XSS flaws (CVSS 6.3-7.3) exploitable by unauthenticated attackers via the web interface. Update to 10.2.2.1-90sv immediately!

Weidmueller IE-SR-2TX series security routers have critical flaws (CVSS 9.8) allowing unauthenticated RCE and buffer overflows, risking industrial automation and critical infrastructure.

TP-Link warns of two critical command injection flaws (CVE-2025-7723, -7724) in VIGI NVRs, allowing remote attackers to execute arbitrary commands, even unauthenticated. Update immediately.

Synology BeeDrive desktop app for Windows has three high-severity vulnerabilities (CVSS 7.5-7.8) allowing local code execution and remote arbitrary file deletion.

CYFIRMA uncovers EdskManager RAT, a sophisticated remote access trojan using HVNC, multi-stage execution, and advanced persistence for covert, long-term system access.

Akamai confirms Coyote, a Latin America-focused banking trojan, is the first malware to exploit Microsoft's UI Automation (UIA) framework in the wild for credential theft.

A critical vulnerability in ASUSTOR's Windows apps, ASUSTOR Backup Plan and EZSync, allows local attackers to gain SYSTEM privileges via unquoted service paths.

Dahua IP cameras are vulnerable to two high-severity buffer overflow flaws (CVE-2025-31700, CVE-2025-31701) allowing remote attackers to crash devices or execute arbitrary code. Update firmware immediately.

18 severe vulnerabilities (CVSS up to 9.8) found in Samsung MagicINFO 9 Server allow RCE, web shell uploads, and auth bypass via hardcoded credentials. Update immediately!

Italian researchers developed "WhoFi," an AI-powered system using Wi-Fi signal reflections from the human body to identify individuals with 95.5% accuracy, even without devices.

Windows 11 24H2's new KB5062660 update introduces "Quick Machine Recovery" for automatic system fixes and a faster, redesigned Black Screen of Death.

Hello bug hunters,

.بسم الله والصلاة والسلام على خير خلق الله، سيدنا محمد صلى الله عليه وسلم

Both Validation and Sanitization are important when we think of application security. Let’s take a look at why that is.

I watched a movie recently. One of those “tech dystopias” starring Emma Watson — yes, she’s petite, impossibly so — playing an…

In the early hours of July 18, 2025, America’s nuclear weapons agency became the latest victim in a sophisticated cyberattack that would…

Someone tricked an AI into sending them $100,000… just by replying to a tweet.

The way we produce and use electricity is changing fast. Across the world, traditional power grids are being replaced by smart grids. These modern grids are designed to be more efficient, more…

SIEMs, IDS, and EDR are powerful — but without analysts, they’re blind. Here’s why every tool in your stack still needs human intelligence

Common misconceptions, interesting facts, and a few half truths about the dark web / onion internet