In the digital realm, establishing and confirming a user's identity is the foundational pillar of cyber security. Authentication acts as…

In the digital age, the pervasive flow and storage of information necessitate robust mechanisms to safeguard its confidentiality…

In an increasingly interconnected digital world, safeguarding sensitive information is paramount for individuals and organizations alike…

In the rapidly evolving digital landscape, cybersecurity stands as a crucial bulwark against an array of threats, yet its practices are…

Introduction

During a casual weekend pentest on mysamay.in, a platform used for marathon registrations across India, I stumbled upon something wild:

Welcome to another Hack The Box walkthrough. The machine we are going to pwn is the GreenHorn machine. Today, we will look at how to pwn…

بِسْمِ اللَّهِ الرَّحْمَنِ الرَّحِيمِ

Proton Authenticator for iOS exposed TOTP secrets in plaintext logs, risking 2FA account leaks. A swift patch fixed it—but trust may take longer.

Trend Micro warns of two critical RCE flaws (CVE-2025-54948, -54987) in Apex One (on-prem) actively exploited in the wild. A fix tool is available, but disables remote agent installs.

I’m Lime, a bug bounty hunter and penetration tester. Today I’m sharing a critical vulnerability I discovered on a VDP (Vulnerability…

Discover how the lack of logs and alerts facilitates attacks, allows for the erasure of traces, and conceals lateral movement.

When I first heard about the Model Context Protocol, or MCP, it reminded me of the early days of APIs and cloud services.

What Happens When Privacy Is a Sales Pitch, Not a Standard

“You patched. You logged. You trained the users.  So why did they still breach you?”

To ensure safety at Vulnetic, there is a major feature we have pushed into the loop, which I will share here. I am hoping this becomes a…

Man-in-the-Middle Attacks: The Scariest Cyber Threat No One’s Talking About

Hackviser platformuna giriş yaparak Laboratuvarlar bölümündeki Yaygın Güvenlik Açıkları bölümüne giriş yapıyoruz ve CVE-2025 olan bölüme…

You’ve probably heard of the dark web a hidden part of the internet that doesn’t show up on Google. But what about dark web websites? Are…

pamspy -- Credentials Dumper for Linux will track a particular userland function inside the PAM (Pluggable Authentication Modules) library

This is enticing to us to say the least, but when trying to use it for social engineering engagements, there are some issues off the bat