A Brief History of Cookies: • Cookies were born in 1994, when Lou Montulli at Netscape solved a problem: the web had no memory. Online carts kept forgetting items, so he created tiny files to help…

In this blog post we will try to understand a few core terminologies, which is essential to know when it comes to Cybersecurity. We will…

Challenge link: https://app.hackthebox.com/challenges/Lost%2520in%2520Hyperspace

En la vida cotidiana, en las oficinas y en el seno familiar, la información se convierte en un activo tan valioso como sensible. Saber qué compartir, qué reservar y qué ocultar no es solo una…

Every second, somewhere in the world, a hacker is trying to break into a system. Sometimes it’s for money, sometimes for power, and sometimes just for fun. The scary part? Most people won’t even know…

ExifLooter finds geolocation on all image urls and directories and also integrates with OpenStreetMap. General info about setting up Exif Looter locally

A new report from Trend Micro details how the Warlock ransomware group is exploiting a vulnerability in unpatched Microsoft SharePoint servers to attack organizations.

A new report reveals how criminals are using the AI website builder Lovable to create tens of thousands of convincing phishing, malware, and fraud websites.

A new report from Cisco Talos exposes Static Tundra, a Russian state-sponsored group that has exploited unpatched Cisco devices for over a decade.

IBM X-Force has exposed QuirkyLoader, a new malware loader that uses DLL side-loading and .NET AOT compilation to deliver Agent Tesla and other threats.

A new report uncovers the "Traffer" economy, a sophisticated cybercriminal ecosystem that uses business-like structures and SEO abuse to steal data at scale.

A critical flaw in the AI tool CodeRabbit allowed a researcher to gain RCE and write access to over a million repositories via a malicious pull request.

A Red Canary report reveals attackers are exploiting an Apache ActiveMQ flaw to breach Linux systems, then patching the vulnerability to hide their presence.

A new Mandiant report reveals a multi-stage USB malware campaign that uses DLL side-loading and stealthy loaders to deploy backdoors and coinminers.

A critical XXE flaw in Apache Tika's PDF parser could allow attackers to access sensitive data and pivot into internal networks via crafted PDF files.

A new report reveals a malicious Python package on PyPI that uses a stealthy dependency and DLL sideloading to deliver a multi-stage malware.

Qualcomm’s new Snapdragon W5+ Gen 2 and W5 Gen 2 wearable chips are the first to support two-way satellite messaging, providing a new layer of safety.

Google has launched the Pixel 10 series, featuring the new Tensor G5 chip, advanced AI features, the Pixelsnap magnetic interface, and a new foldable.

A critical vulnerability (CVSS 9.3) in Docker Desktop could allow malicious containers to gain full control of the host system. Update now to version 4.44.3.

Apple has released an urgent security update to patch a zero-day vulnerability (CVE-2025-43300) in its Image I/O framework that is being actively exploited in targeted attacks.