As a member of the DFIR team at SecuTech, you’re tasked with investigating a security breach affecting multiple endpoints across the…

I survived getting my GSEC certification a few weeks ago. The key word in my last sentence being “survived”. Reflecting back on the…

> About Author Hi, I’m Sharon, a product manager at Chaitin Tech. We build SafeLine, an open-source Web Application Firewall built for…

The ransomware ecosystem has grown increasingly sophisticated, with adversaries steadily blurring the line between state-aligned advanced…

The Digital Battlefield: A Surge in Sophisticated Cyber Attacks

Ledger is a hard-rated Active Directory machine on TryHackMe that showcases a classic certificate template misconfiguration attack path…

On April 30, 2025, a Finance department user received a phishing email with a RAR file. Trusting the sender, the user extracted and opened…

Introduction

A Yandex security specialist discovered a high-severity vulnerability in the Chromium V8 engine, helping to secure Google Chrome and other browsers.

OpenAI tightens safety protocols for ChatGPT, now age-gating users and implementing new rules to protect minors after tragic incidents and lawsuits.

A protocol exploit allowed a hacker to mint 120 million YU tokens, causing the Yala stablecoin to crash by 80% and raising serious questions about DeFi security.

A hacker group claimed to have breached Google's Law Enforcement Request System. Google confirmed a fake account was created but stated no data was accessed.

Your AI coding assistant can be tricked into embedding backdoors and stealing data. A new report details the risks of indirect prompt injection and other vulnerabilities.

Conor Brian Fitzpatrick, the administrator of the notorious hacking forum BreachForums, has been sentenced to three years in federal prison.

Apple has released an update to patch a zero-day vulnerability (CVE-2025-43300) in older iPhones and iPads that was exploited in targeted attacks.

Google is changing its Android security update policy to a new risk-based system, prioritizing high-risk vulnerabilities in monthly patches.

A self-replicating worm, dubbed Shai-Hulud, is infecting over 180 npm packages, stealing developer credentials and spreading autonomously.

A massive ad-fraud operation called SlopAds used over 200 Android apps to generate 2.3 billion fraudulent ad-bids daily, exposing a new level of sophistication.

A new FileFix campaign is tricking users into pasting malicious commands into file upload windows to deliver the StealC data stealer.

Perl has made a surprising return to the top ten in the September TIOBE Index, while Python holds strong at number one. Learn what's behind the comeback.