In the ever-escalating world of cyber warfare, a recent operation by the Indian-linked APT group Patchwork reveals just how advanced and…

Walkthrough for “VulnEscape” on Hack The Box

Hey guys, not a long post. Just brushing off my Medium account after not giving it much love this year thus far.

New cryptomining campaigns by Soco404 and Koske exploit cloud misconfigurations in PostgreSQL and JupyterLab, deploying stealthy, AI-generated malware hidden in images.

A vulnerability (CVE-2025-8194, CVSS 7.5) in Python's tarfile module allows attackers to cause infinite loops and DoS by processing maliciously crafted archives. Patch immediately!

Anthropic introduces new weekly rate limits for Claude AI subscribers, particularly impacting heavy users of Claude Code, sparking backlash over transparency and usage caps.

The women-only Tea dating app experienced a second data breach, exposing over 1 million private messages, including sensitive discussions on abortion and infidelity, along with user IDs and selfies.

Linux Kernel 6.16 is officially out, bringing significant enhancements to hardware support, new drivers, and optimizations for filesystems and networking, including Intel TDX and Nvidia GPU support.

GitHub is experiencing a widespread service outage, affecting Git operations, API requests, pull requests, and issue tracking. The engineering team is actively working on restoration.

Cyble uncovers RedHook, a new Android banking trojan targeting Vietnamese users with sophisticated phishing, remote access, screen capture, and keylogging for full device takeover.

A critical vulnerability (CVE-2025-54419, CVSS 10.0) in Node-SAML allows attackers to bypass SAML 2.0 authentication by manipulating unsigned assertion data.

Netskope uncovers XWorm 6.0, a new variant using VBScript droppers, AMSI bypass, and critical process marking to evade detection and force system reboots if terminated.

A new stealthy campaign uses Windows LNK files to deploy the REMCOS backdoor via multi-stage PowerShell commands, bypassing antivirus and gaining full system control.

PyPI warns of a new phishing campaign using "pypj.org" to spoof its login page, tricking maintainers into revealing credentials. PyPI itself is not compromised.

In a deep-dive into the infrastructure powering some of today’s most prevalent malware campaigns, security researcher Vasilis Orlof uncovers a suspected bulletproof hosting provider operating unde…

Elon Musk confirms a $16.5B, nine-year deal with Samsung for AI6 chip production at its Texas foundry, a crucial win for Samsung's struggling chip business and Tesla's AI future.

Neuralink has joined an AI-powered "Smart Bionic Eye" research initiative led by UCSB, aiming to restore sight to the blind by integrating brain-computer interface technology.

An EU open-source Android age verification app is sparking controversy due to its reliance on Google Play Integrity API, raising concerns over digital sovereignty and excluding users with custom ROMs.

A critical command injection flaw (CVE-2025-54418, CVSS 9.8) in CodeIgniter's ImageMagick handler allows remote code execution via malicious filenames or text.

Debian Linux is proactively addressing the Year 2038 Problem by adopting a 64-bit time_t format on 32-bit architectures, preparing for the timestamp overflow set to impact legacy systems globally.

Allianz Life confirms a data breach impacting over 1.4 million individuals after attackers used social engineering to access a cloud-based CRM system. ShinyHunters is suspected.