A new report reveals that Android droppers are evolving to bypass Google's Pilot Program, delivering a wider range of malware than ever before.

A new malicious npm package, nodejs-smtp, is impersonating a popular email library to secretly hack cryptocurrency wallets and steal funds.

A major breach at Salesloft exposed authentication tokens, triggering a global threat cascade and putting hundreds of companies at risk.

A security researcher discovered a critical flaw in Pudu Robotics' systems, allowing her to control its fleet of service robots from afar.

A new report reveals a malicious campaign using Google Ads to promote a fake PDF editor, which covertly installs the TamperedChef infostealer.

Google will host a special event to unveil Gemini for Home, a new AI-powered assistant that promises a more integrated and proactive smart home experience.

The Envoy Project has patched two new vulnerabilities: a use-after-free bug that can lead to DoS (CVE-2025-54588) and a session-hijacking flaw in its OAuth2 filter.

Google Play Services now backs up Android's anti-theft settings to the cloud. This small change ensures your phone stays protected even after a factory reset.

OpenAI has acquired Statsig for $1.1 billion and announced a major restructuring of its leadership, signaling a new focus on its applications business.

Google has released Chrome 140, patching six vulnerabilities including a high-severity use-after-free flaw in the V8 JavaScript engine that could allow for remote code execution.

I missed an AI bug that ended up costing me a place in the top 5 at the DEFCON 33 Bug Bounty Village CTF.

Hey depressed people, after a banger response from the previous article on JWT, part1. I am back again with Part 2 of it. As I already…

Enhance your application security with a comprehensive application security risk assessment. Identify vulnerabilities, ensure compliance…

How the HOOK Android Trojan Locks Screens, Steals Everything, and Watches Your Every Move

Disclaimer:

It all started on September 1. A law office website in NJ went offline, and all admin accounts were suddenly inaccessible. The first hint…

Hi, I’m Bhuwan Patidar, a VAPT analyst, Pentester and hacker from Indore, India, with active learning goals , ethically reporting…

Hi, I’m Bhuwan Patidar, a VAPT analyst, Pentester and hacker from Indore, India, with active learning goals , ethically reporting…

The Domain Discovery Detective

Employee logins are the easiest way in. When url:user:pass for your domain shows up in fresh leaks, attackers try it fast. Catch it early…

In today’s digital-first world, businesses are more vulnerable than ever to cyber threats. From phishing attacks to credential leaks…