Cybersecurity isn’t just a “big company” problem anymore. Small businesses are increasingly on the radar of attackers — and the costs are…

Explain a penetration technique you’ve used hands-on (even in labs)

Your API is the front door to your system. If attackers get in, they own everything. No excuses. No second chances.

A critical flaw (CVE-2025-41243) in Spring Cloud Gateway with a CVSS 10.0 score allows unauthenticated RCE via SpEL injection. A PoC has been released.

A new malware loader, CountLoader, is linked to Russian ransomware groups. The malware uses phishing lures impersonating the Ukrainian National Police to deliver payloads.

A critical flaw (CVE-2025-55241) in Microsoft Entra ID could have allowed a compromise of every tenant worldwide by bypassing security with "Actor tokens."

A decade-old browser flaw, "BiDi Swap," allows attackers to craft deceptive URLs for phishing. The bug, found by Varonis, exploits mixed-text direction.

A new report reveals that a Russian influence network, CopyCop, has created over 200 new AI-powered fake media sites to spread propaganda and deepfakes globally.

AhnLab has uncovered BlackLock, a Go-based ransomware targeting Windows, Linux, and VMware ESXi. The malware uses advanced crypto and covert backup deletion.

A new supply chain attack on PyPI is delivering SilentSync, a Python RAT. The malware steals credentials and files from developers' systems.

A new report reveals that an exposed Oracle Database was the entry point for a ransomware attack. Hackers used a scheduler function to gain access and deploy malware.

Sophos uncovers GOLD SALEM, a new ransomware group exploiting SharePoint flaws. The group uses EDR evasion and legitimate tools to attack global targets.

Security researchers at ByteRay have published a detailed exploitation write-up of CVE-2025-9961, a vulnerability in TP-Link’s CWMP (CPE WAN Management Protocol) service that can be weaponized to …

Microsoft is launching Gaming Copilot, an AI assistant that provides in-game help, account support, and recommendations on Windows and the Xbox mobile app.

Meta is opening its smart glasses to outside developers, allowing them to build new AI-powered services for Ray-Ban and Oakley smart glasses.

Microsoft is investing an additional $4 billion in a new AI data center in Wisconsin, raising its total investment to over $7B. It's poised to be the world's most powerful.

💡 Why 95% of Ethical Hackers Are Using cURL Wrong

Nx 套件在 npm 上遭劫持，竊取加密貨幣錢包、GitHub/npm 代幣、SSH 金鑰與環境祕密 — — 且是首例有文獻記載的惡意軟體利用 AI CLI 工具進行偵察與資料外洩的案件。

How a single photo could hack your phone.

A new series devoted to tech hacks explained by an actual hacker that you can use to set yourself apart from the woefully unprepared when…