A new supply chain attack, GPUGate, is using Google Ads and fake GitHub repositories to deliver malware that only decrypts on systems with a GPU.

A new Pwnie-winning exploit (CVE-2024-50264) demonstrates a sophisticated method for privilege escalation in the Linux kernel, bypassing modern security defenses.

A phishing attack compromised a maintainer, leading to malicious code being injected into 18 popular npm packages with over 2 billion weekly downloads.

A new report reveals two sophisticated AI-driven influence networks—Hidden Charkha and Khyber Defender—that spread pro-India and pro-Pakistan propaganda.

A new HTTP/2 flaw, MadeYouReset, forces servers to reset streams, which can lead to a denial-of-service attack. Microsoft Azure is already protected.

Anthropic is expanding its regional restrictions to block foreign subsidiaries of companies based in sanctioned countries to prevent potential AI misuse.

A critical vulnerability in Apache Jackrabbit (CVE-2025-58782) exposes enterprise systems to JNDI injection and remote code execution. Update now.

A new ransomware strain, Cephalus, is attacking companies by using a legitimate SentinelOne binary to execute its payload, disable defenses, and encrypt files.

A new study reveals that ransomware gangs have an average lifespan of just 1.36 years, yet they inflict massive damage through the RaaS model.

A new report reveals attackers are using fake ConnectWise ScreenConnect installers to deliver a complex chain of remote access trojans and other malware.

Hello folks,

Assalam o alaikum for muslim brothers, sisters and hello for non muslims, i hope all of you are doing well and learning new things day by…

my first password reset poisoning to acount takeover

Hyper link injection in email to open redirect

“Can you hack your way to a $5.50 flight to New York?” That’s what I set out to explore — armed with a proxy, curiosity, and way too much…

Hey there!😁

SQL Injection is a web security vulnerability that allows an attacker to interfere with the queries an application makes to its database…

While doing recon on a translated.com, I was collecting subdomains and links. i started fuzzing the subdomains one by one but wasn’t…

In the cybersecurity battlefield, the loudest attacks are the ones everyone talks about — brute force, ransomware, or phishing. But the…

🟠 Step 1 — Define Trust Boundaries

Summary