From hospitals to help desks, AI-powered chatbots and virtual assistants have become digital frontliners — streamlining tasks, reducing…

How to protect your AI models from manipulation, poisoning, and exploitation in 2025

I wanted to give an overview of Public Key Infrastructure (PKI) with maximum abstraction — keeping the explanation simple and accessible —…

TryHackMe Backtrack CTF writeup.

Maybe a little bit of intermediate-ish nmap

📖What You’ll Learn

Running system commands in Python lets you automate terminal-based tasks like pinging a server, scanning ports with Nmap, checking network…

Build Practical Python Scripts for Cybersecurity

Why You Need Error Handling in Cybersecurity

Learning Objectives

Learning Objectives

AquaSec uncovers Koske, a new cryptojacking malware potentially AI-generated, hiding in innocent-looking images to silently infect Linux servers and evade detection with rootkit stealth.

An international law enforcement operation, "Operation Checkmate," has seized BlackSuit ransomware's dark web sites. However, intelligence suggests the prolific group may rebrand as "Chaos."

Microsoft confirms China-linked Storm-2603 is exploiting SharePoint zero-days (CVE-2025-49706, -49704) to deploy Warlock ransomware on unpatched on-premises servers.

CYFIRMA warns of a new Android malware campaign disguised as banking apps, aggressively targeting Indian bank customers to steal credentials, intercept OTPs, and perform unauthorized transactions.

ropr is a blazing fast multithreaded ROP Gadget finder. These gadgets may be used for binary exploitation and to subvert vulnerable executables.

CastleLoader, a sophisticated malware loader, is actively exploiting ClickFix phishing and fake GitHub repos to distribute infostealers and RATs, with a 29% infection rate.

TerraformGoat is HuoCorp research lab's "Vulnerable by Design" multi cloud deployment tool. supported cloud vendors include AWS, Azure, Google

A critical command injection flaw (CVE-2025-54416) in tj-actions/branch-names GitHub Action allows arbitrary code execution in workflows, affecting over 5,000 public repositories.

Unit 42 reveals homograph phishing attacks exploiting visually similar characters to bypass defenses and deceive users. AI is amplifying this threat, making malicious emails highly convincing.

Sygnia uncovers "Fire Ant," a sophisticated cyber-espionage campaign exploiting VMware ESXi and vCenter since early 2025, using advanced techniques to evade detection and maintain persistent access.