WhiteRabbit is an Insane-rated Linux machine on Hack The Box, and it definitely earns that label. It pushes you to think far beyond the…

Writeup of the “Retro” machine of tryhackme

Wristbands, crowd control, and backstage passes. A festival-inspired guide to modern cybersecurity

Hello, this is Penta Security.

안녕하세요. 펜타시큐리티입니다.

First of all I want to thank @TheSocialDork on Youtube for sharing this project and encouring new people to discover new tools and increase…

Does Zero carb mean No Breaches? Let’s find out.

In 2025, a leaked API key can cost you users, money, and trust in a matter of hours.

CISA warns of a critical authentication bypass flaw (CVE-2025-8284, CVSS 9.8) in Packet Power devices, allowing unauthenticated remote attackers to gain full access.

The OLED MacBook Pro is reportedly delayed until late 2026 or 2027. It's expected to feature a new design, an M6 chip, and a Dynamic Island.

A critical vulnerability (CVE-2025-55188, CVSS 2.7) in 7-Zip allows remote attackers to perform arbitrary file writes via a crafted archive, potentially leading to code execution.

Apple is testing an updated App Intents framework to deepen Siri's integration with major apps like Uber and Amazon, aiming for a "voice-first" interaction experience.

A new Japanese law will force Apple to allow third-party browsers like Chrome and Firefox to use their own rendering engines on iOS, mirroring and expanding on the EU’s Digital Markets Act.

Xerox has released a security update for FreeFlow Core, addressing two high-impact vulnerabilities that could allow attackers to perform Server-Side Request Forgery (SSRF) or gain Remote Code Exec…

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a security advisory warning about a critical authentication bypass vulnerability affecting ARC Solo devices — widely used mon…

Kaspersky Labs has uncovered a sophisticated, multi-pronged malware operation leveraging fake legal threats, compromised WordPress sites, and malicious torrents to deliver a cryptocurrency-stealin…

IBM X-Force has unveiled an in-depth analysis of CastleBot, a newly emerging Malware-as-a-Service (MaaS) framework that is quickly becoming a potent weapon in the cybercrime ecosystem. Designed fo…

Security researcher Jann Horn from Google Project Zero disclosed the technical details and proof-of-concept exploit code for a high-severity vulnerability in the Linux kernel — CVE-2025-38236 (CVS…

Koi Security’s research team has unveiled GreedyBear, a threat group orchestrating industrial-scale cryptocurrency theft through a seamless blend of browser extensions, malware executables, and fr…

S2W’s Threat Analysis and Intelligence Center (TALON) has uncovered a sophisticated malware campaign attributed to the North Korean APT group ScarCruft (a.k.a. APT37, Reaper, Ricochet Chollima). T…

Security researchers at ESET have uncovered a zero-day path traversal vulnerability in the Windows version of WinRAR that has been actively exploited to execute arbitrary code on victims’ systems.…