A new BankBot campaign targets Android users in Indonesia and Vietnam. The malware uses spoofed app stores and a WebSocket-based download for stealth.

AhnLab has uncovered Kawa4096, a Go-based ransomware targeting Windows, Linux, and VMware ESXi. The malware uses advanced crypto and covert backup deletion.

A new report reveals attackers are abusing ScreenConnect to deliver AsyncRAT and custom malware payloads, a serious supply chain risk for enterprises and MSPs.

A new report reveals Subtle Snail, an Iran-nexus group, is using fake LinkedIn jobs to deliver a custom backdoor for espionage against European telecom and defense firms.

A new report from Black Lotus Labs reveals SystemBC, a malware-powered proxy network. The botnet compromises VPS systems and fuels global ransomware attacks.

Aprende a usar XSStrike, la herramienta clave para encontrar y explotar vulnerabilidades de Cross-Site Scripting (XSS).

0x00 Why GenAI Matters for Bug Bounty

DevOps + Cloud Security Blog Series by Angie

A practical, psychology-aware playbook to cut social-engineering risk when tools and firewalls aren’t enough.

Blockchain has often been praised as a system that cannot be broken. Its design of distributed ledgers, transparency, and security makes it…

Breaking down IP addresses, subnets, VLANs, and the OSI model in plain English.

A cyberattack causes travel delays in Europe, while North Korean hackers use ChatGPT-generated military IDs in spear-phishing attacks

I’m revverzed — A guy who just enjoy IT since a little kid and never gonna stop learning.

Will AI End Programmers?

Google DeepMind's Dustin Tran, a core developer of the Gemini project, has left the company to join Elon Musk's xAI to work on the next generation of Grok.

OpenAI plans to spend over $100 billion to secure cloud computing resources for its AI models, burning through tens of millions of dollars a day to operate.

A new large-scale SEO poisoning campaign, "Operation Rewrite," uses the BadIIS module to hijack web servers, manipulate search results, and redirect users to scams.

A new malicious npm package, "fezbox," hides a credential-stealing payload within a QR code, which it uses to exfiltrate web cookies and credentials.

A critical XSS flaw in the Lectora e-learning platform (CVE-2025-9125) allows for malicious code injection, posing a risk of session hijacking and redirection.

HAIDAKHAN COMPLETE DATABASE HACKED !! Your Data is not secure with this crappy low security website who only want money money and money from you in the name of #Donations for their own nefarious …