Aprende a usar Amass para la enumeración de subdominios, el mapeo de activos y el reconocimiento en ciberseguridad y Bug Bounty.

Challenge: Can you find me — CyberTalents (Forensics / Medium) 
Given: f100.zip (log file said to be “highly compressed”) 
Goal: “Find the…

First Phase : Information Gathering

In March 2025, Turkey enacted a sweeping cybersecurity law that establishes a centralized Cybersecurity Presidency and national council to…

Unlocking the Value of SecurityX: Skills, Strategy, and Certification

Hello Techies ,I am Rishabh Kumar working as a security researcher (pentester) at IIT Bhilai.

In today’s increasingly digital landscape, corporate trust is no longer built solely on financial results. Reputation now hinges on digital…

How Deepfakes and AI Impersonation Target the Invisible Glue of Business

Sınıfsız Alanlar Arası Yönlendirme (CIDR) Nedir?

As technology races forward in 2025, so too does the sophistication of scams. While phishing emails and robocalls remain common annoyances…

Chinese hackers breached the Canadian House of Commons on August 8, stealing staff data and device info in an attack linked to a Microsoft SharePoint vulnerability.

The latest Windows 11 Insider Preview build introduces new selection modes for the "Click to Do" tool, improves File Explorer, and fixes numerous bugs.

Cisco has issued an urgent advisory for a critical vulnerability (CVSS 10.0) in its Secure Firewall Management Center software, allowing for remote code execution.

Hashcat has released version 7.0.0 after two years of work, bringing massive performance gains, GPU virtualization, new algorithms, and a Python Bridge system.

The BtcTurk exchange has halted deposits and withdrawals after a $49 million hot wallet hack, with the stolen funds already being laundered.

A new report shows that AI agents are successfully discovering and patching complex software bugs in projects like SQLite and FreeRDP that elude traditional methods.

A critical privilege escalation flaw in Capsule Kubernetes (CVE-2025-55205) allows tenant users to bypass security and launch cross-tenant attacks.

Enhancer for YouTube, a popular extension with 600K+ users, is leaving Firefox. The developer cites a "deeply unpleasant" and slow review process.

The U.S. Treasury is exploring a plan to embed digital identity verification directly into DeFi smart contracts to combat money laundering and other illicit finance.

A new phishing campaign in India uses fake government solar subsidy websites to trick victims into downloading a malicious app that steals UPI PINs and other data.

PyPI is now checking for expired domains to prevent "domain resurrection attacks," a major step in securing the Python Package Index from account takeovers.