The IoT is part of everyone’s daily life! So why not explore it? 🤨

Epidemics we cannot see Ordinary users are never concerned about their security; they don’t download patches or update their antivirus software, and they respond to all security warnings with a …

Next step of my LLM safety experiments — moving from simple regex filters to chained guardrails

Generate synthetic time series with formal privacy guarantees: DP-Diffusion-TS combines AI with differential privacy for safe data sharing

Introduction: The Coming Quantum Threat

In May 2025, Cloudflare successfully blocked the largest distributed denial of service (DDoS) attack ever recorded, peaking at a staggering…

The cybersecurity landscape is evolving rapidly. Traditional Web Application Firewalls, with their static rules and regex patterns…

Introduction

Exploitation of critical vulnerabilities, espionage campaigns, and ransomware group operations

For Educational Purposes Only. Use only on hosts/networks you own or have permission to test.

“The strongest defense isn’t faster patching — it’s smarter, supported humans making better decisions.”

Apache Fory has a critical RCE vulnerability (CVE-2025-61622) in its pyfory module. An attacker can exploit an unguarded pickle fallback to execute arbitrary code.

A critical RCE flaw (CVSS 10) in Doxense's Watchdoc print management solution allows unauthenticated attackers to execute code and take control of the print server.

Broadcom has patched three flaws in VMware Aria Operations and VMware Tools. The vulnerabilities include privilege escalation and information disclosure.

A new PoC reveals a race condition in Qualcomm's KGSL GPU driver (CVE-2024-38399). Two threads can access the same list simultaneously, leading to a Use-After-Free vulnerability.

Stormshield CTI uncovers ongoing APT35 phishing infrastructure impersonating video conferencing services to target organizations in Israel and other regions.

NCSC exposes RayInitiator, a bootkit for Cisco ASA 5500-X devices without Secure Boot, which deploys the LINE VIPER shellcode loader for persistent and stealthy attacks.

Silent Push details how cybercriminals and APTs are misusing DDNS services for stealthy C2 servers, phishing, and malware delivery. Dozens of high-profile groups are involved.

The new infostealer Acreed is rapidly gaining market share post-Lumma takedown. It uses BNB Smart Chain and Steam profiles for C2, with a focus on crypto theft.

Olymp Loader, a new assembly-based MaaS, has emerged in underground markets. It's a turnkey solution for cybercriminals, with stealth and persistence features.

For this year’s Cybersecurity Awareness Month, GitHub’s Bug Bounty team is offering some additional incentives to security researchers!