Let’s dive into a fascinating topic: tracking someone’s IP using files. We’ll break down the concept first before delving into a…

De horas de cliques em abas a um único comando no terminal. Uma história sobre a automação da validação de CSP, HSTS e certificados SSL.

Descubre cómo Dalfox automatiza la detección de vulnerabilidades XSS y se convierte en una pieza clave de tu flujo de trabajo profesional.

Challenge : Network Intercepting

Understanding Zero-Day Vulnerabilities: The Invisible Threat Zero-day vulnerabilities, often called 0-days, represent flaws in software or hardware that remain unknown to the vendor or developer and …

In recent years, one of the most famous examples of product placement is Netflix’s Stranger Things. It didn’t just recreate the 1980s; it…

The post was buried on page 3 of an obscure environmental research forum. Written in technical German by a graduate student analyzing…

In June 2025, KNP Logistics Group, a UK transport giant with 500 trucks and 158 years of history, collapsed.

Expressway Hachthebox Walkthrough Hi there, this is a step by step writeup to solve Expressway on Hackthebox Season 9 The attack vector involved a multi-stage process beginning with the exploitation …

Cisco patches a Critical 9.9 zero-day (CVE-2025-20333) in ASA/FTD VPN web servers. Authenticated attackers can exploit the flaw for root-level Remote Code Execution.

Cisco disclosed a Critical RCE flaw in its Firewall ASA/FTD, IOS, IOS XE, and IOS XR web services. Unauthenticated attackers can gain root access.

Malicious Rust crates, downloaded 8,400+ times, were found to be typosquatting legitimate libraries to scan source code and steal Solana and Ethereum private keys.

Cisco patches CVE-2025-20362, a medium-high zero-day vulnerability in ASA/FTD VPN web servers that is being exploited to gain unauthorized access to restricted resources.

Apache Airflow 3.0.3 has a bug (CVE-2025-54831) exposing sensitive connection details, including passwords, to all users with only READ permissions. Update immediately.

GTIG reveals BRICKSTORM, a stealthy Go backdoor linked to China-nexus UNC5221, targeting US legal/SaaS firms to steal IP and establish long-term espionage access.

GitLab urges immediate upgrade to patch versions 18.4.1+ for high-severity DoS flaws that allowed unauthenticated attackers to crash self-managed instances.

NVIDIA released an urgent update for its Megatron-LM LLM framework, patching four high-severity code injection flaws that could allow attackers to compromise AI workflows.

Microsoft blocked a credential phishing campaign that used AI to generate complex, verbose code in an SVG file to obfuscate its payload and evade defenses.

The Lone None group uses fake copyright notices to deliver a new stealer malware that focuses on crypto theft via clipboard replacement and utilizes Telegram for C2.

A vulnerability dubbed "LNK Stomping" (CVE-2024-38217) is actively used to strip the 'Mark of the Web' from LNK files, bypassing Windows security policies.

Discover powerful alternatives and complementary tools that most security testers overlook but can dramatically improve your bug hunting…