Kaspersky exposes a stealthy cyberespionage campaign targeting Russian IT firms and global businesses, using DLL hijacking, social media C2, and obfuscation to deploy Cobalt Strike.

Group-IB uncovers how UNC2891 used Linux bind mounts (MITRE T1564.013) to hide a physical ATM cyberattack, involving a Raspberry Pi and a plan to tamper with HSMs for fraudulent withdrawals.

Sophos uncovers a new infection chain for GOLD BLADE's RedLoader malware, combining LNK files, WebDAV, and DLL sideloading to bypass defenses and deploy payloads stealthily.

Check Point Research exposes JSCEAL, a stealthy malware campaign using malvertising and fake apps to steal crypto credentials and wallets via compiled JavaScript payloads.

Elastic Security Labs exposes NOVABLIGHT, a NodeJS-based infostealer-botnet MaaS disguised as an "educational tool," actively distributed via Telegram and targeting victims with fake game installers.

Opera has filed an antitrust complaint against Microsoft in Brazil, accusing it of anti-competitive practices by bundling Edge with Windows and hindering rival browsers.

onsemi and NVIDIA are collaborating to accelerate AI data centers' shift to an 800VDC power architecture, aiming for massive energy efficiency and power density gains.

Boost your speed, stealth, and shell-fu. These .bashrc hacks aren’t just about aesthetics — they’re about power, precision, and getting…

In July 2025, a proof-of-concept (PoC) code for a memory leak vulnerability (CVE-2025–5777) affecting Citrix NetScaler ADC and Gateway…

Envision this scenario: You’re a reporter in 2025, contacts sharing classified information that could expose corruption. Your device…

DOI: https://doi.org/10.47175/rissj.v6i2.1127 (read more)

The final chapter of Quentin Drummond Anderson’s More Short Stories from Tech delivers a masterclass in contemporary crime fiction that…

Reconnaissance:
- Nmap to see port 22 and port 80 are open also noticing a .git
- Ferox buster to determine additional web pages noticing…

It’s 2025, and your package manager login might be your biggest security risk.

Mark Zuckerberg asserts AI-powered smart glasses will be the dominant interface, claiming those without them will face a "cognitive disadvantage," despite Reality Labs' ongoing losses.

North Korea's Lazarus Group is waging a covert cyberespionage campaign, poisoning 234+ open-source packages on npm/PyPI to steal secrets from CI/CD pipelines and developer environments.

A critical vulnerability (CVE-2025-54576, CVSS 9.1) in OAuth2-Proxy allows attackers to bypass authentication by manipulating query parameters that match skip_auth_routes regex patterns.

Windows 11 Insiders can now access the Notification Center and calendar directly from the taskbar on secondary monitors, a long-requested multi-monitor enhancement.

Google confirms it will sign the EU's Code of Practice for General Purpose AI, aligning with the EU AI Act, contrasting Meta's refusal due to "excessive interference."

TikTok unveiled new trust and safety features on July 30, including enhanced Family Pairing, Well-being Missions to foster healthy habits, and creator support tools for a safer platform.

How a simple blog comment can hijack your web app. Stored DOM XSS combines the danger of persistent input with silent client-side…