LazyAdmin is a beginner-friendly CTF room on TryHackMe that teaches fundamental enumeration and privilege escalation techniques.

Infrastructure as Code (IaC) has changed how we manage cloud resources. But it also brought new security challenges. A big one is how to…

In July 2025, cybersecurity journalists uncovered a startling development: a U.S. startup is openly selling personal data pilfered by malware, effectively repackaging hackers’ stolen loot as a…

TryHackMe AllSigns2Pwnage CTF challenge writeup.

A phishing attack compromised an npm maintainer's account, leading to the injection of "Scavenger" malware into popular packages like eslint-config-prettier, posing a severe supply chain threat.

CISA and FBI warn of Interlock ransomware's surge, targeting US healthcare and critical infrastructure with double extortion, drive-by downloads, and new FileFix social engineering.

Google unveils AI-powered calling for local businesses, letting users delegate calls for pricing and availability. This controversial feature is now rolling out in the US, with premium tiers getting higher quotas.

Weeks after a major takedown, Lumma Stealer has resurfaced with new stealth tactics, exploiting cracked software, fake CAPTCHAs, and GitHub to resume its credential-stealing operations.

China's Ministry of State Security warns of deliberate backdoors in foreign software/hardware and alleged subsea espionage devices, urging a shift to domestic tech and heightened public vigilance.

VulnLab is a web vulnerability lab project developed by Yavuzlar. Vulnerabilities: SQL Injection, Cross Site Scripting (XSS), more...

Akamai confirms Coyote, a Latin America-focused banking trojan, is the first malware to exploit Microsoft's UI Automation (UIA) framework in the wild for credential theft.

The Greedy Sponge group is persistently targeting Mexican organizations with a modified AllaKore RAT and SystemBC, using advanced geofiltering and stealth tactics to commit financial fraud.

mx-takeover focuses DNS MX records and detects misconfigured MX records. It currently support three technique.

Socket discovered 10 malicious npm packages from Toptal's GitHub, exfiltrating GitHub tokens and wiping systems. The compromise vector is under investigation.

Zscaler uncovers two China-linked APT campaigns, "GhostChat" and "PhantomPrayers," targeting the Tibetan community with sophisticated spyware via fake apps and DLL sideloading.

A critical flaw (CVE-2025-54371, CVSS 7.5) in the form-data package, used by Axios 1.10.0, allows attackers to predict multipart boundaries, risking HTTP parameter pollution and injection. Update to 1.11.0 now!

Dropping Elephant is targeting Türkiye's defense industry, particularly missile manufacturers, with weaponized conference lures, VLC DLL sideloading, and custom shellcode for intelligence exfiltration.

A broken access control vulnerability (CVE-2025-24000) in Post SMTP WordPress plugin allows low-privileged users to take over administrator accounts and full sites.

Four open-source packages on npm and PyPI (56k+ downloads) are secretly deploying sophisticated spyware, performing webcam surveillance, keylogging, and credential theft.

Wiz Research uncovers Soco404, an evolving cryptojacking operation exploiting cloud misconfigurations and PostgreSQL to stealthily mine cryptocurrency across Linux and Windows.

Mitel issued patches for a high-severity SQL injection flaw (CVE-2025-52914) in MiCollab, allowing authenticated attackers to access user provisioning data and execute arbitrary database commands.