The Greedy Sponge group is persistently targeting Mexican organizations with a modified AllaKore RAT and SystemBC, using advanced geofiltering and stealth tactics to commit financial fraud.

mx-takeover focuses DNS MX records and detects misconfigured MX records. It currently support three technique.

Socket discovered 10 malicious npm packages from Toptal's GitHub, exfiltrating GitHub tokens and wiping systems. The compromise vector is under investigation.

Zscaler uncovers two China-linked APT campaigns, "GhostChat" and "PhantomPrayers," targeting the Tibetan community with sophisticated spyware via fake apps and DLL sideloading.

A critical flaw (CVE-2025-54371, CVSS 7.5) in the form-data package, used by Axios 1.10.0, allows attackers to predict multipart boundaries, risking HTTP parameter pollution and injection. Update to 1.11.0 now!

Dropping Elephant is targeting Türkiye's defense industry, particularly missile manufacturers, with weaponized conference lures, VLC DLL sideloading, and custom shellcode for intelligence exfiltration.

A broken access control vulnerability (CVE-2025-24000) in Post SMTP WordPress plugin allows low-privileged users to take over administrator accounts and full sites.

Four open-source packages on npm and PyPI (56k+ downloads) are secretly deploying sophisticated spyware, performing webcam surveillance, keylogging, and credential theft.

Wiz Research uncovers Soco404, an evolving cryptojacking operation exploiting cloud misconfigurations and PostgreSQL to stealthily mine cryptocurrency across Linux and Windows.

Mitel issued patches for a high-severity SQL injection flaw (CVE-2025-52914) in MiCollab, allowing authenticated attackers to access user provisioning data and execute arbitrary database commands.

When I started bug bounty hunting, I used to rely on manual work — and it was painful.  Then I discovered Burp extensions, and it…

As an ethical hacker dedicated to enhancing cybersecurity, I’ve diligently reported potential vulnerabilities through platforms like…

Descubre cómo las librerías y frameworks desactualizados son puertas de entrada para RCE y filtración de datos. ¡Protege tus sistemas!

Full Write-up on hackenproof blog:

Modern siber tehditlere karşı koymak için yalnızca duvar örmek yeterli değil, o duvarların nereden aşılabileceğini de görmeniz gerekir…

Digital hygiene with VPNs and VMs

Modular forms in React (TypeScript) with Formik and Redux (Toolkit)

The global technology landscape is undergoing rapid transformation, with certain sectors emerging as particularly valuable and in-demand. Based on current trends and projections, here's an in-depth…

Okay darling, we need to have a serious chat about keeping Big Tech’s grubby hands off your personal business. These data vultures are…

You’ve seen the message a hundred times.

Let’s Defend is an interactive, hands-on training platform focused on Blue Team (defensive cybersecurity) operations. It simulates a…