1️⃣. Intro
This lab has another SQL injection vulnerability in the product category filter. The goal here isn’t stealing passwords yet…

The U.S. Justice Department has seized over $2.8 million in crypto and assets from a suspected Zeppelin ransomware operator, a key figure in the defunct group.

A new analysis of the leaked ERMAC 3.0 source code reveals critical vulnerabilities in the malware's infrastructure, despite its advanced features.

A new report from Censys details cybercriminal C2 infrastructure, finding that Cobalt Strike is dominant, with China and the U.S. being major hotspots.

Cybercriminals are using sophisticated mobile phishing kits to hijack investor accounts, then using them in "ramp-and-dump" schemes to manipulate stock prices.

Following the arrest of the XSS forum admin, a former moderator has launched a new platform, Rehubcom, threatening to fill the void in the cybercrime ecosystem.

A new report from Cisco Talos details UAT-7237, a Chinese-speaking APT group targeting Taiwan's web infrastructure with customized open-source tools.

Researchers found that Gemini models interpret invisible Unicode "Tag" characters as commands, allowing attackers to trick AI agents into implanting backdoors.

Researchers have unveiled SNI5GECT, a new framework that exposes critical 5G vulnerabilities by intercepting and injecting messages during the pre-authentication phase.

A security researcher has released a new tool, Kurasagi, that bypasses Windows 11's PatchGuard, renewing the debate over kernel security.

A new Windows vulnerability bypasses a recent patch, allowing attackers to silently steal NTLM hashes and plant malicious files with zero user interaction.

Microsoft's new Nested App Authentication (NAA) offers seamless logins but creates a potential new attack vector, as demonstrated by security researchers.

SoftBank is making a $2 billion investment in Intel, a move that signals confidence in the struggling chipmaker's future amidst reports of U.S. government interest.

OpenAI has launched a new low-cost "ChatGPT Go" subscription in India, a strategic move to convert users in a key market with cheaper pricing and extended features.

Google Translate is preparing to launch a new AI-powered "Advanced" model and a gamified "Practice" mode, which could directly challenge Duolingo.

Apple's Xcode 26 beta reveals plans for native integration with Claude Sonnet 4 and Claude Opus 4, giving developers a new AI assistant option.

👉🏻 https://www.youtube.com/watch?v=CWikxMxr_LE&t=2s

Attending DEFCON in Las Vegas this year felt like stepping into the epicentre of the cybersecurity world. It’s one thing to stay on top of…

Mobile threats are the ways hackers compromise smartphones and tablets to extort data, spy on users, or take control of devices. Hackers can target both consumers and organizations. •Malware…

DDoS is no longer just about taking you down — it’s the art of slowing your services. 1+ Tbps volumetric attacks routinely outpace ISPs’…

Protecting user data isn’t optional anymore—it’s survival. Here’s how to implement strong login systems that keep hackers out and trust in.