Greetings! Welcome to the “System-Host Based Attacks CTF” from the eJPT course by INE. If you are currently enrolled in the course and…

Investigating and Restoring a Compromised Web Application Using a Web Browser, OWASP ZAP, and Postman

Walkthrough for Blog CTF challenge on TryHackMe

From exposed SSNs to unsecured government files, simple Google searches are still revealing sensitive data in 2025. Here’s what hackers…

Executive Summary

A new report reveals a dangerous Linux malware campaign that uses malicious filenames to execute a stealthy, fileless attack without the victim's knowledge.

A new report reveals that the Pakistan-based APT36 is targeting Indian government entities using spear-phishing and Linux-specific malware to steal sensitive data.

A new report reveals the Anatsa banking trojan is now targeting over 831 financial institutions worldwide. The malware is distributed via fake apps on Google Play.

A new report reveals the return of Gayfemboy, a Mirai-based IoT malware strain. It now uses advanced evasion techniques and targets multiple vendors to launch attacks.

A new RaaS operation called BQTLock is targeting victims with sophisticated malware, aggressive ransom demands, and a tiered subscription model for affiliates.

The U.S. government has converted a portion of Intel's subsidies into a direct equity investment, acquiring a 9.9% stake in the company for $8.9 billion.

Elon Musk's xAI has open-sourced the Grok 2.5 model. However, the custom license imposes significant restrictions, limiting its use for commercial purposes and model training.

NVIDIA has ordered suppliers to halt production of its H20 AI chip for China, a move that highlights how technology has become a central battleground in global politics.

The ROM hacking site RHDI has stopped mirroring files to the Internet Archive after its account was repeatedly flagged for "malware" due to false positives.

A new regulation in Russia will require all smartphones and tablets sold in the country to come pre-installed with MAX, a state-backed messaging app.

Google's new Android 16 beta introduces a feature to force dark mode on apps that don't support it, solving a major usability issue for many users.

IBM has issued a critical security bulletin for a flaw (CVE-2025-36157) in its Jazz Team Server. The vulnerability could allow unauthenticated remote attackers to take control of affected systems.

X/Twitter is removing the ability to programmatically like and follow from its free API to combat spam and bot activity, pushing developers toward paid tiers.

A day ago, I officially passed the PT1 certification. Honestly, I still can’t believe it! I was lucky enough to get a free voucher for the…

Open Source Intelligence (OSINT) is often described as a double-edged sword in cybersecurity. It refers to gathering and analyzing publicly…

In 2025, cybersecurity is no longer a “nice to have” — it’s a survival tool. Small businesses, especially in Toronto and across Canada…