Cloudflare’s 1.1.1.1 was hit by 12 unauthorized certificates from Fina CA, raising PKI concerns and spotlighting Microsoft’s continued trust.

A critical macOS flaw (CVE-2025-24204) in gcore allows a user to read any process memory and bypass TCC. A PoC is public, and patching is urgent.

A critical flaw in Argo CD (CVE-2025-55190) with a CVSS 10 score allows low-privileged API tokens to retrieve sensitive repository credentials. Admins should patch now.

CISA adds three new vulnerabilities to its KEV Catalog, including flaws in the Linux kernel, Android Runtime, and Sitecore CMS. All are being actively exploited.

A new report reveals that the Lazarus Group is actively monitoring CTI platforms to evade detection and sustain a ClickFix phishing campaign against the cryptocurrency sector.

A critical flaw in Ruijie Reyee RG-ES series switches allows unauthenticated remote attackers to modify login credentials and gain full admin access. CVE-2025-56752 has a CVSS 9.4 score.

Bug bounty is wild. Sometimes you fuzz for hours and find nothing. Other times, one tiny character can open the door to a Critical Account…

How a Simple Flaw in Passwordstate Put 29,000 Companies at Risk

How I created an OverTheWire-style wargame with a cyberpunk twist and open-sourced it for the community: https://155.138.230.109:8888/

A True Story of IoT Betrayal How My Dream of Automation Became a Digital Nightmare

The “Invisible Costs” of Breaches OEMs Want CISOs to Know

The world of cyber threats has never been static. We have seen espionage groups quietly siphon sensitive information for governments and we…

“In cybersecurity, speed kills — the faster you detect, enrich, and act on IOCs, the better your chances of stopping an attack.”

Web security often feels like an arms race — and in that race, SafeLine WAF has quickly become the go-to choice for developers and…

A single misconfigured Redis instance exposed user sessions for a week.  That was not an accident. It was a predictable chain of small…

Authentication and access control are fundamental to cybersecurity. They answer two critical questions: Who are you? and What are you…

Why Architecture Matters

How North Korea Launders Billions Through Crypto — and How We Can Stop Them North Korea is one of the most isolated countries in the world. Yet its cyber units have built one of the most …

Level 5

White-box penetration testing, also called clear-box or structural testing, is a powerful approach in cybersecurity that gives security…

Room link: https://tryhackme.com/room/introductiontoedrs