Step 1 — respond to me

ArmouryLoader is a highly sophisticated malware using OpenCL GPU decryption and advanced obfuscation to bypass EDRs, gaining privilege escalation by hijacking ASUS Armoury Crate.

Cyfirma reveals Raven Stealer, a new, lightweight MaaS infostealer built in Delphi/C++, using reflective process hollowing and Telegram bots for stealthy data exfiltration from browsers.

Evilent, a new PoC tool, exploits the Windows Event Log service to coerce connections to an attacker-controlled SMB share, potentially leaking NetNTLMvLMv2 credentials from antivirus scans.

Over a dozen critical vulnerabilities (CVSS 9.8) in Honeywell's Niagara Framework expose smart buildings and industrial systems to root-level control via misconfigurations and MitM attacks.

Tracebit uncovered a critical flaw in Google's Gemini CLI (v0.1.14 patch available): it allowed silent code execution and data exfiltration via hidden prompt injections in files like README.md.

Kaspersky reports the ToolShell exploit chain (CVE-2025-49706, -49704, -53770, -53771) actively targets SharePoint servers globally, enabling unauthenticated RCE and auth bypass.

Kaspersky exposes a stealthy cyberespionage campaign targeting Russian IT firms and global businesses, using DLL hijacking, social media C2, and obfuscation to deploy Cobalt Strike.

Group-IB uncovers how UNC2891 used Linux bind mounts (MITRE T1564.013) to hide a physical ATM cyberattack, involving a Raspberry Pi and a plan to tamper with HSMs for fraudulent withdrawals.

Sophos uncovers a new infection chain for GOLD BLADE's RedLoader malware, combining LNK files, WebDAV, and DLL sideloading to bypass defenses and deploy payloads stealthily.

Check Point Research exposes JSCEAL, a stealthy malware campaign using malvertising and fake apps to steal crypto credentials and wallets via compiled JavaScript payloads.

Elastic Security Labs exposes NOVABLIGHT, a NodeJS-based infostealer-botnet MaaS disguised as an "educational tool," actively distributed via Telegram and targeting victims with fake game installers.

Opera has filed an antitrust complaint against Microsoft in Brazil, accusing it of anti-competitive practices by bundling Edge with Windows and hindering rival browsers.

onsemi and NVIDIA are collaborating to accelerate AI data centers' shift to an 800VDC power architecture, aiming for massive energy efficiency and power density gains.

Boost your speed, stealth, and shell-fu. These .bashrc hacks aren’t just about aesthetics — they’re about power, precision, and getting…

In July 2025, a proof-of-concept (PoC) code for a memory leak vulnerability (CVE-2025–5777) affecting Citrix NetScaler ADC and Gateway…

Envision this scenario: You’re a reporter in 2025, contacts sharing classified information that could expose corruption. Your device…

DOI: https://doi.org/10.47175/rissj.v6i2.1127 (read more)

The final chapter of Quentin Drummond Anderson’s More Short Stories from Tech delivers a masterclass in contemporary crime fiction that…

Reconnaissance:
- Nmap to see port 22 and port 80 are open also noticing a .git
- Ferox buster to determine additional web pages noticing…

It’s 2025, and your package manager login might be your biggest security risk.