A state-sponsored North Korean hacking group was breached by "ethical" hackers. An 8.9GB archive of tools and stolen data has been leaked online.

A new WinRAR zero-day vulnerability (CVE-2025-8088) is being exploited by the RomCom cyber-espionage group to deploy malware via malicious archives. Update to v7.13 now.

A critical vulnerability in Erlang/OTP's SSH stack (CVSS 10.0) is being actively exploited, with 70% of attacks targeting industrial network firewalls.

A sophisticated, fileless attack using a PowerShell-based RAT is targeting Israeli critical infrastructure. Learn how the multi-stage campaign works to exfiltrate data.

Pavel Durov announced that over the past 20 days, Telegram has received hundreds of reports from users about cases of extortion and doxxing. Based on these complaints, the platform initiated a large-scale purge of...

A new study reveals a critical flaw in AIOps systems: attackers can use data poisoning to trick AI into executing harmful commands and compromising IT infrastructure.

OpenAI's GPT-5 launch faces user backlash over performance, new limits, and concerning "jailbreak" security flaws. Is the AI giant losing its edge?

A year after its discovery, the XZ backdoor remains in multiple Docker Hub images, posing a risk to developers and the software supply chain.

Antitrust pressure may force Google to sell Chrome. Perplexity AI has reportedly made a $34.5B bid for the browser, which has 3.5 billion users.

Google's new "Preferred Sources" feature lets you prioritize trusted websites in your search results. Now available in the U.S. and India.

An Australian court issues a preliminary ruling favoring Epic Games, finding that Apple and Google's app stores lack safeguards against anti-competitive conduct.

Hey there!😁

Python has become the go-to language for cybersecurity enthusiasts and ethical hackers. Its simplicity and rich ecosystem of libraries make it perfect for writing scripts to test the security of…

Hello everyone, today we are going to work on the “Editor” machine from Hack The Box.

Join me as I tackle the eJPT one topic at a time. CTF 2Host and Network Penetration Testing: Exploitation.

> By: grisun0, White Hat Blogger & Chief Overthinker of Suspiciously Suspended Threads
5 min read · Probably posted at 3 AM because sleep…

Hey everyone,

Stop Listing Tools — Start Showing Impact in Your Cybersecurity CV

Search Engine for Open Directories

The recent Lintasarta CxO BPD Summit in Yogyakarta revealed an unexpected truth: Indonesia’s path to becoming a high-income nation by 2045…

After decades taking the same (largely reactive) tack as the rest of the world, Japan is now flipping the script and perhaps setting a new…