Jenkins has patched multiple flaws, including a high-severity DoS vulnerability in its bundled Jetty server that could allow unauthenticated attackers to crash the service.

✅ I hacked into the biggest website for security research practice, testphp.vulnweb.com, and compromised its login page. 🔓 Now, when you…

Autor: Hack and Learn / Time Clocker

Introduction

As a member of the DFIR team at SecuTech, you’re tasked with investigating a security breach affecting multiple endpoints across the…

I survived getting my GSEC certification a few weeks ago. The key word in my last sentence being “survived”. Reflecting back on the…

> About Author Hi, I’m Sharon, a product manager at Chaitin Tech. We build SafeLine, an open-source Web Application Firewall built for…

The ransomware ecosystem has grown increasingly sophisticated, with adversaries steadily blurring the line between state-aligned advanced…

The Digital Battlefield: A Surge in Sophisticated Cyber Attacks

Ledger is a hard-rated Active Directory machine on TryHackMe that showcases a classic certificate template misconfiguration attack path…

On April 30, 2025, a Finance department user received a phishing email with a RAR file. Trusting the sender, the user extracted and opened…

Introduction

A Yandex security specialist discovered a high-severity vulnerability in the Chromium V8 engine, helping to secure Google Chrome and other browsers.

OpenAI tightens safety protocols for ChatGPT, now age-gating users and implementing new rules to protect minors after tragic incidents and lawsuits.

A protocol exploit allowed a hacker to mint 120 million YU tokens, causing the Yala stablecoin to crash by 80% and raising serious questions about DeFi security.

A hacker group claimed to have breached Google's Law Enforcement Request System. Google confirmed a fake account was created but stated no data was accessed.

Your AI coding assistant can be tricked into embedding backdoors and stealing data. A new report details the risks of indirect prompt injection and other vulnerabilities.

Conor Brian Fitzpatrick, the administrator of the notorious hacking forum BreachForums, has been sentenced to three years in federal prison.

Apple has released an update to patch a zero-day vulnerability (CVE-2025-43300) in older iPhones and iPads that was exploited in targeted attacks.

Google is changing its Android security update policy to a new risk-based system, prioritizing high-risk vulnerabilities in monthly patches.