Siber güvenlik dendiğinde çoğu kişinin aklına karmaşık yazılımlar, şifre kırma algoritmaları ve zararlı kodlar gelir. Oysa saldırganların…

NOTE: This is an analysis based on 2 Twitter Posts about the DPRK Email List Leak, which appeared on 13th and 14th August 2025.

When we think about forensic investigations and threat hunting, DNS isn’t usually the first thing that pops into our minds. But if you dig…

Introduction

Traffic is a liar. It smiles, waves, pretends to be a “legit” user and before you know it, your API is drowning under thousands of bogus…

Photo by Louis Reed on Unsplash

Nga një problem teknik në një prioritet strategjik kombëtar

Nga një problem teknik në një prioritet strategjik kombëtar

This article explores the AI in penetration testing: benefits and risks of , helping organizations understand how to balance automation…

Introduction to Cyber Security

In today’s rapidly evolving digital landscape, the intersection of cloud computing and cybersecurity has become more critical than ever. As…

1️⃣. Intro
This lab has another SQL injection vulnerability in the product category filter. The goal here isn’t stealing passwords yet…

The U.S. Justice Department has seized over $2.8 million in crypto and assets from a suspected Zeppelin ransomware operator, a key figure in the defunct group.

A new analysis of the leaked ERMAC 3.0 source code reveals critical vulnerabilities in the malware's infrastructure, despite its advanced features.

A new report from Censys details cybercriminal C2 infrastructure, finding that Cobalt Strike is dominant, with China and the U.S. being major hotspots.

Cybercriminals are using sophisticated mobile phishing kits to hijack investor accounts, then using them in "ramp-and-dump" schemes to manipulate stock prices.

Following the arrest of the XSS forum admin, a former moderator has launched a new platform, Rehubcom, threatening to fill the void in the cybercrime ecosystem.

A new report from Cisco Talos details UAT-7237, a Chinese-speaking APT group targeting Taiwan's web infrastructure with customized open-source tools.

Researchers found that Gemini models interpret invisible Unicode "Tag" characters as commands, allowing attackers to trick AI agents into implanting backdoors.

Researchers have unveiled SNI5GECT, a new framework that exposes critical 5G vulnerabilities by intercepting and injecting messages during the pre-authentication phase.

A security researcher has released a new tool, Kurasagi, that bypasses Windows 11's PatchGuard, renewing the debate over kernel security.