As a pentester, I’ve always leaned heavily on Python for rapid scripting, automation, and proof-of-concept exploits. It’s been a loyal tool…

HackTheBox Artificial Walkthrough: Exploiting TensorFlow RCE for Web Shells and Linux Privilege Escalation

ThreatFabric researchers have uncovered PhantomCard, an Android Trojan that uses an NFC relay attack to steal contactless card data and enable fraudulent payments.

Trend Micro research exposes Crypto24, a coordinated ransomware operation that uses legitimate tools, custom malware, and advanced evasion tactics to breach and extort victims.

Apache Tomcat has released updates for two serious flaws: a session fixation vulnerability and a "MadeYouReset" DoS vulnerability affecting multiple versions.

A new vulnerability, "MadeYouReset," has been discovered in HTTP/2, allowing attackers to exploit stream resets to launch devastating denial-of-service attacks.

Google Play now requires custodial crypto wallet providers in 15+ jurisdictions to obtain licenses. Non-custodial wallets are exempt from the new rules.

Microsoft has permanently removed the outdated and insecure PowerShell 2.0 from Windows 11, a move that enhances security but may affect some enterprise scripts.

An Ethereum developer lost funds to a fake AI extension that stole his private key, highlighting how even experts can fall victim to sophisticated phishing attacks.

A 2017 Microsoft Office flaw, CVE-2017-11882, is still being exploited by attackers, proving that outdated software remains a major security risk.

Microsoft's Universal Print Anywhere is now available to all users, offering a secure cloud printing solution with QR code authentication to prevent data leakage.

TL;DR: This post shows how to build a fully serverless pipeline where uploads arrive via a REST endpoint, land in an ingest S3 bucket, get…

Stop hackers before they even touch your application

By Minehli Arakelians Gheshlagh

This chapter is about how to start your planning, aligning your PIRs, and missions to the organisation strategy. This is defo worth a read

ShadowPacketRHR

Apple is reportedly developing a high-end, AI-powered smart camera and doorbell to compete with Amazon's Ring and Google Nest in the home security market.

A critical vulnerability (CVE-2025-7972) in Rockwell Automation's FactoryTalk Linx software allows attackers to bypass authentication and alter industrial networks.

ImageMagick has patched four security vulnerabilities, including high-severity memory corruption bugs, that could affect applications using the toolkit.

A critical vulnerability (CVE-2025-20265) in Cisco Secure Firewall Management Center allows unauthenticated attackers to execute commands with high privilege.

This isn’t just my sob story, it’s a warning for anyone using VS Code and Cursor.