The Kimsuky group is targeting South Korean agencies with new malware that uses social engineering and code obfuscation to bypass Windows Defender and steal data.

TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts

Android 16's new Advanced Protection Mode adds a USB security feature that may require you to unlock your phone to enable fast charging.

The Browser Company, creators of the discontinued Arc browser, have launched a new AI browser called Dia, with a $20/month subscription for unlimited AI access.

Elon Musk's xAI plans to incorporate paid ads into Grok's responses to cover high computing costs. The move raises questions about neutrality and trust.

Socket uncovers 11 malicious Go packages, including 8 typosquats, on GitHub. The packages deliver stealthy, in-memory payloads that compromise developer machines and CI pipelines.

A new report reveals Chinese-speaking smishing syndicates are using phishing-as-a-service, MFA bypass, and stolen cards to conduct a multi-billion dollar fraud campaign targeting digital wallets.

Silent Push exposes SocGholish as a MaaS platform for Initial Access Brokers. The malware, disguised as fake updates, fuels top-tier Russian ransomware groups like Evil Corp.

Google introduces "Guided Learning" mode for Gemini, an AI framework designed to help students learn with step-by-step guidance. A free subscription is also offered.

Google claims AI Overviews have not hurt website traffic, but a new study shows users click links significantly less when AI summaries are present.

The PCI-SIG is developing PCIe 8.0, which aims for 1TB/s of bandwidth, but it's designed for data centers and AI—not for your next gaming PC.

Steam is ending support for macOS 11 Big Sur on October 15. Due to security risks, users must upgrade their OS to continue using the platform.

How a single OIDC parameter opened the door to internal services in Keycloak servers worldwide

Descubre cómo el SSRF permite a un atacante acceder a la red interna, leer metadatos de la nube y escalar privilegios.

A Beginner’s Guide to Security Operations

An introductory guide

Skip the theory — here’s how I automated a core hacking tool in less than 50 lines of Python

How Attackers Abuse It, and What to Watch For

TL;DR walkthrough of the Soupedecode 01 TryHackMe room.

Linux has command line utilities and tools that are very powerful and meant for security research. Learn how to use it on Windows!

Why CAPTCHAs No Longer Work in the Age of AI — And What’s Next