A new report reveals that an exposed Oracle Database was the entry point for a ransomware attack. Hackers used a scheduler function to gain access and deploy malware.

Sophos uncovers GOLD SALEM, a new ransomware group exploiting SharePoint flaws. The group uses EDR evasion and legitimate tools to attack global targets.

Security researchers at ByteRay have published a detailed exploitation write-up of CVE-2025-9961, a vulnerability in TP-Link’s CWMP (CPE WAN Management Protocol) service that can be weaponized to …

Microsoft is launching Gaming Copilot, an AI assistant that provides in-game help, account support, and recommendations on Windows and the Xbox mobile app.

Meta is opening its smart glasses to outside developers, allowing them to build new AI-powered services for Ray-Ban and Oakley smart glasses.

Microsoft is investing an additional $4 billion in a new AI data center in Wisconsin, raising its total investment to over $7B. It's poised to be the world's most powerful.

💡 Why 95% of Ethical Hackers Are Using cURL Wrong

Nx 套件在 npm 上遭劫持，竊取加密貨幣錢包、GitHub/npm 代幣、SSH 金鑰與環境祕密 — — 且是首例有文獻記載的惡意軟體利用 AI CLI 工具進行偵察與資料外洩的案件。

How a single photo could hack your phone.

A new series devoted to tech hacks explained by an actual hacker that you can use to set yourself apart from the woefully unprepared when…

By Minehli Arakelians Gheshlagh

The Celebrity Who Never Existed. She had millions of followers and brands waiting in line for a partnership with her. Her fans admired and glorified her. She even released music, dealt with illness …

A part of a day in the life of a cybersecurity guy…

In the ever-shifting battlefield of cybersecurity, defenders are tempted to respond to every new threat by adding yet another layer of…

Uvalde Consolidated Independent School District will reopen on September 22 after a ransomware attack shut down all campuses for a week…

Complete write up of ‘The Planet’s Prestige’ lab from BlueTeamLabs.

XBOW tests: GPT-5 hacked nearly twice as many targets with fewer steps.

Subtitle:
 A practical, ethical walkthrough using Kali, Metasploitable2 and bWAPP — extract hashes, crack passwords, and learn mitigation…

What a wonderful week of getting to learn on everything cyber-security and the different concepts involved in the cyber-security world…

Sherlock scenario

An accounting team receives an urgent payment request from a known vendor. The email appears legitimate but contains a suspicious link and…