VNC is a technology that has revolutionized the way we interact with computers and servers remotely. However, …

CVE-2025-32428 flaw in Jupyter Remote Desktop Proxy exposes TigerVNC over the network. Patch to version 3.0.1 or switch to TurboVNC to mitigate.

These articles are some of my notes as I practice my penetration testing knowledge targeting the Metasploitable 2 box. The contents and…

Sturnus is a new Android banking trojan that captures decrypted Signal/WhatsApp messages, performs overlay attacks, and uses VNC for full, remote device takeover.

Against the backdrop of a surge in schemes involving the remote manipulation of infected devices, a new tool

FBI/CISA warn pro-Russia hacktivists (CARR, NoName057) are targeting critical infrastructure with unsophisticated attacks. They exploit unsecured VNC connections to manipulate HMIs and cause physical damage.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

This is another box from PwnTillDawn, difficulty is rated at “easy”.

iVerify exposes Cellik, a $150/mo Android RAT that wraps malicious code inside Play Store apps to grant attackers total device control.

Cyfirma uncovers the RuTaxi Android banking Trojan, a highly persistent malware using VNC capabilities to hijack Russian bank accounts and crypto wallets.

TailVNC combines Tailscale’s mesh network with a stealthy VNC server. Bypass Windows Session 0 and secure desktops without ever opening a public port.

When most people think about penetration testing, they imagine buffer overflows, remote code execution vulnerabilities, and advanced…