This post walks you through solving the “Cookies” challenge from picoCTF, categorized under Web Exploitation and marked as Easy. Let’s…

The attack that’s turning your trusted websites against you

Prompt injection is one of the first attack vectors used to exploit weaknesses or bypass behavior in AI models.

🌐 My First Steps into the World of SOC

FidusTech: Leading the Way in Cybersecurity and Scam Fund Recovery Every year, millions of people fall victim to online scams, investment fraud, and stolen cryptocurrency. From fake trading platforms …

Introduction

When attackers breach a system, logs lie, binaries mutate, but memory doesn’t forget. From hidden rootkits to credential theft, the…

Introduction: Breaking the Silo — Why GRC Needs Cross-Functional Integration

My Introduction

Understand how antivirus software works and what detection techniques are used to bypass malicious file checks.

Imagine walking into a store that looks stunning spotless floors, perfect lighting, and displays that practically beg to be posted on…

It’s true, Chrome was vulnerable to RCE, but the update closes the door

Salesloft has restored its Salesforce integration after a breach compromised OAuth tokens. The company details how attackers gained access and exfiltrated data.

GreyNoise reports a massive surge in scanning activity targeting Cisco ASA devices from a Brazilian botnet, which often precedes new vulnerability disclosures.

A new report details a new trojan, MostereRAT, that uses legitimate remote access tools like AnyDesk and TightVNC to maintain covert control.

A new report reveals that the Chinese cyber-espionage group Salt Typhoon has been active for years, with infrastructure dating back to 2019.

A new supply chain attack, GPUGate, is using Google Ads and fake GitHub repositories to deliver malware that only decrypts on systems with a GPU.

A new Pwnie-winning exploit (CVE-2024-50264) demonstrates a sophisticated method for privilege escalation in the Linux kernel, bypassing modern security defenses.

A phishing attack compromised a maintainer, leading to malicious code being injected into 18 popular npm packages with over 2 billion weekly downloads.

A new report reveals two sophisticated AI-driven influence networks—Hidden Charkha and Khyber Defender—that spread pro-India and pro-Pakistan propaganda.