A new Go-based ransomware, Obscura, is abusing domain controllers by placing its executable in the NETLOGON folder, ensuring it gets replicated across the network.

CISA has added two TP-Link router flaws to its KEV Catalog, including an RCE vulnerability in end-of-life devices. Both are being actively exploited in the wild.

A set of ten critical flaws, dubbed "Frostbyte10," were found in industrial controllers. These bugs could allow attackers to tamper with global food and medicine supply chains.

A new ransomware group, DireWolf, has rapidly emerged to target global businesses with a powerful new strain of malware and a double extortion model.

Introduction: A Vulnerability We Thought Was Fixed

How Hackers Are Turning “Contact Us” Forms Into a Weapon

I’ve been doing all of this on and off, and commitment has been my biggest hurdle lately. I’ve delayed everything — my own projects, the…

While preparing for one of my interviews, I decided to document my notes and learning process. I thought this might be useful for anyone…

The Bitcoin Penguins 1 BTC Giveaway (2025) is one of the project’s biggest hooks. Here’s exactly how you can claim or win it:

AI browser agents are one of the most exciting yet also riskiest frontiers in technology today. Unlike chatbots that simply answer…

Let’s face it — fraud and cyberattacks are getting smarter every day. From shady credit card transactions to sneaky hackers poking around…

Overview

Catfish attempt, but I didn’t bite

Problem:

How a Coffee Shop’s Free Wi-Fi Taught Me That Not All That Glitters Is Secure

Pendahuluan

Apple and Google are reportedly finalizing a deal to integrate Gemini AI into Siri, a move that would provide Apple's voice assistant with more advanced capabilities.

Three anomalous TLS certificates were improperly issued for Cloudflare’s 1.1.1.1 DNS. The certificates were trusted by Microsoft and went undetected for months.

A critical RCE flaw (CVSS 10.0) in the DeepDiff Python library allows for arbitrary code execution via class pollution. A PoC is public, and patching is urgent.

Perplexity AI has partnered with PayPal and Venmo to offer users complimentary access to a Perplexity Pro subscription and its AI-powered Comet browser.

The GNU Guix team has issued an urgent advisory for a privilege escalation flaw in guix-daemon. Local users could gain control of build outputs, risking system integrity.