Microsoft's September Patch Tuesday addresses 86 flaws, including two zero-days and nine critical vulnerabilities in Windows, Office, Hyper-V, and Azure.

Google has released Chrome 140, patching two vulnerabilities including a critical use-after-free flaw in ServiceWorker and a high-severity flaw in Mojo.

Siemens has disclosed a critical flaw in its SIVaaS platform. A network share is exposed without authentication, allowing unauthenticated attackers to access or alter sensitive data.

A new AI scam network is targeting Indian social media users. It uses deepfakes of celebrities and fake news sites to promote fraudulent investment schemes.

CERT/CC warns of critical flaws in the Hiawatha web server. The vulnerabilities could allow attackers to bypass authentication and hijack sessions.

A new report reveals GONEPOSTAL, a backdoor by Russia's APT28 that hides in Outlook macros and uses email itself as a covert command-and-control channel for espionage.

The Lazarus Group is using a new campaign to steal crypto by exploiting a vulnerability (CVE-2025-48384) with fake interviews and poisoned code repositories.

A new malware strain is targeting exposed Docker APIs, evolving from a cryptominer into a stealthy botnet that blocks ports to "own" a victim's system for exclusive use.

A new report reveals North Korea's APT37 is using Rust-based malware called Rustonotto, marking a shift toward modern languages and multi-platform attacks.

☕ The Coffee-Fueled Recon

Discover how attackers abuse clipboard paste handling to trigger Blind XSS from setup to exploitation

1. Project overview

Cloudflare blocked a record-setting 11.5 Tbps distributed denial-of-service (DDoS) attack, the largest volumetric assault it has faced. The…

Zscaler confirmed that customer data was exposed in a third-party breach after attackers compromised Salesloft’s Drift platform in a…

The Day Our “Convenience” Almost Cost Us Everything

What is DOM XSS?

Executive Summary

Here’s a clear guide on how to claim your Nexchain (NEX) presale tokens in August 2025:

How to participate in bitcoin penguins NFT/Airdrop Rewards 2025 Bitcoin Penguins NFT + Airdrop reward mechanics in 2025. This is separate from the presale and the 1 BTC staking giveaway. Let’s go …