Google unveils AI-powered calling for local businesses, letting users delegate calls for pricing and availability. This controversial feature is now rolling out in the US, with premium tiers getting higher quotas.

Weeks after a major takedown, Lumma Stealer has resurfaced with new stealth tactics, exploiting cracked software, fake CAPTCHAs, and GitHub to resume its credential-stealing operations.

China's Ministry of State Security warns of deliberate backdoors in foreign software/hardware and alleged subsea espionage devices, urging a shift to domestic tech and heightened public vigilance.

VulnLab is a web vulnerability lab project developed by Yavuzlar. Vulnerabilities: SQL Injection, Cross Site Scripting (XSS), more...

Akamai confirms Coyote, a Latin America-focused banking trojan, is the first malware to exploit Microsoft's UI Automation (UIA) framework in the wild for credential theft.

The Greedy Sponge group is persistently targeting Mexican organizations with a modified AllaKore RAT and SystemBC, using advanced geofiltering and stealth tactics to commit financial fraud.

mx-takeover focuses DNS MX records and detects misconfigured MX records. It currently support three technique.

Socket discovered 10 malicious npm packages from Toptal's GitHub, exfiltrating GitHub tokens and wiping systems. The compromise vector is under investigation.

Zscaler uncovers two China-linked APT campaigns, "GhostChat" and "PhantomPrayers," targeting the Tibetan community with sophisticated spyware via fake apps and DLL sideloading.

A critical flaw (CVE-2025-54371, CVSS 7.5) in the form-data package, used by Axios 1.10.0, allows attackers to predict multipart boundaries, risking HTTP parameter pollution and injection. Update to 1.11.0 now!

Dropping Elephant is targeting Türkiye's defense industry, particularly missile manufacturers, with weaponized conference lures, VLC DLL sideloading, and custom shellcode for intelligence exfiltration.

A broken access control vulnerability (CVE-2025-24000) in Post SMTP WordPress plugin allows low-privileged users to take over administrator accounts and full sites.

Four open-source packages on npm and PyPI (56k+ downloads) are secretly deploying sophisticated spyware, performing webcam surveillance, keylogging, and credential theft.

Wiz Research uncovers Soco404, an evolving cryptojacking operation exploiting cloud misconfigurations and PostgreSQL to stealthily mine cryptocurrency across Linux and Windows.

Mitel issued patches for a high-severity SQL injection flaw (CVE-2025-52914) in MiCollab, allowing authenticated attackers to access user provisioning data and execute arbitrary database commands.

When I started bug bounty hunting, I used to rely on manual work — and it was painful.  Then I discovered Burp extensions, and it…

As an ethical hacker dedicated to enhancing cybersecurity, I’ve diligently reported potential vulnerabilities through platforms like…

Descubre cómo las librerías y frameworks desactualizados son puertas de entrada para RCE y filtración de datos. ¡Protege tus sistemas!

Full Write-up on hackenproof blog:

Modern siber tehditlere karşı koymak için yalnızca duvar örmek yeterli değil, o duvarların nereden aşılabileceğini de görmeniz gerekir…

Digital hygiene with VPNs and VMs