An Iranian state-aligned APT, Nimbus Manticore, is targeting European defense and telecom firms with sophisticated spear-phishing campaigns and new malware.

Microsoft has fixed a long-standing bug in Windows Hello, removing the upgrade block that prevented affected devices from installing Windows 11 version 24H2.

Perplexity has launched an AI-powered Email Assistant for its $200/month premium subscribers. It can organize inboxes, schedule meetings, and draft replies.

Mozilla has launched a new feature for Firefox Add-ons, allowing developers to quickly roll back to a previous version to fix critical bugs or security issues.

Learn how to use XSStrike, the key tool for finding and exploiting Cross-Site Scripting (XSS) vulnerabilities.

CrowdStrike and Meta have launched CyberSOCEval, an open-source benchmark suite for testing how large language models (LLMs) perform on key…

A new wave of FileFix phishing attacks is rapidly spreading worldwide, using advanced obfuscation, steganography, and multilingual lures to…

It was only a matter of time.
 For years, we speculated about the day artificial intelligence would cross the line from defense to offense…

Learn about SQL injection and exploit this vulnerability through the SQLMap tool.

Learn about the different types of shells.

Today, I reached an important milestone in my cybersecurity journey: I successfully completed the OhSINT room on TryHackMe! 🔍💻

This room focuses on an introduction to Gobuster, an offensive security tool used for enumeration.

Learn about and use Hydra, a fast network logon cracker, to bruteforce and obtain a website’s credentials.

Compare Outlook vs. Gmail for Business in 2025: Explore security, phishing protection, compliance, and real user insights to choose the…

Data Privacy Compliance In order to safeguard data privacy, companies must navigate a patchwork of regulations, evolving threats, and growing consumer concerns. #BusinessOperations #Cybersecurity …

I recently needed to set up a vulnerability scanner for one of my projects, and of course, the first name that came to my mind was Nessus…

OpenSSF and other foundations warn that they can no longer be the unpaid gatekeepers of the software supply chain and that enterprises must contribute financially.

A high-severity flaw in the Salesforce CLI installer (CVE-2025-9844) allows for arbitrary code execution and privilege escalation on affected systems.

A critical, unpatched OnePlus flaw (CVE-2025-10184) allows any app to read SMS data without permission, breaking MFA protections. PoC is available.

Microsoft is reportedly building a pilot program to pay publishers when their content is used by its AI, signaling a new path for content monetization.