A potential Vine relaunch would now face competition from TikTok, Reels, and Shorts

The application is vulnerable to SQL injection in the category parameter of the product filter. This allows an attacker to manipulate the…

The login functionality of the application is vulnerable to SQL injection. Specifically, the username field is not properly sanitized…

A SQL injection vulnerability exists in the category parameter of the product filter functionality. The application does not properly…

FortiGuard Labs exposes UpdateChecker.aspx, a heavily obfuscated web shell targeting Middle East critical infrastructure, capable of stealthy system control via encoded C# and JSON.

Trail of Bits remotely compromised a Netgear router and Bitdefender Box V1 at DistrictCon's Junkyard event, exposing critical risks in unsupported networking devices.

Sasha Levin (NVIDIA) proposes formal guidelines for AI in Linux kernel development, including a "Co-developed-by" tag and standardized configurations for AI tools like Claude and Copilot.

Packj (pronounced package) is a command-line (CLI) tool to vet open-source software packages for "risky" attributes

The Patchwork APT group (likely Indian) has launched a new cyber-espionage campaign against Turkey's defense sector, using conference lures and DLL sideloading to steal secrets on unmanned platforms and hypersonic weapons.

I Just Testing For IDOR and Access Control cuz THAT’S WHAT WE’RE ALWAYS LOOKING FOR AS BUG BOUNTY RESEARCHERS OR TACTORS RIGHT WE’RE…

“Security isn’t about breaking systems. It’s about protecting people.”

Descubre como las Fallos de Identificación y Autenticación afectan los sitios web ¡Conoce como explotarlo y protegerte!

ClickJacking

In the ever-escalating world of cyber warfare, a recent operation by the Indian-linked APT group Patchwork reveals just how advanced and…

Walkthrough for “VulnEscape” on Hack The Box

Hey guys, not a long post. Just brushing off my Medium account after not giving it much love this year thus far.

New cryptomining campaigns by Soco404 and Koske exploit cloud misconfigurations in PostgreSQL and JupyterLab, deploying stealthy, AI-generated malware hidden in images.

A vulnerability (CVE-2025-8194, CVSS 7.5) in Python's tarfile module allows attackers to cause infinite loops and DoS by processing maliciously crafted archives. Patch immediately!

Anthropic introduces new weekly rate limits for Claude AI subscribers, particularly impacting heavy users of Claude Code, sparking backlash over transparency and usage caps.

The women-only Tea dating app experienced a second data breach, exposing over 1 million private messages, including sensitive discussions on abortion and infidelity, along with user IDs and selfies.

Linux Kernel 6.16 is officially out, bringing significant enhancements to hardware support, new drivers, and optimizations for filesystems and networking, including Intel TDX and Nvidia GPU support.