Introduction

Exploitation of critical vulnerabilities, espionage campaigns, and ransomware group operations

For Educational Purposes Only. Use only on hosts/networks you own or have permission to test.

“The strongest defense isn’t faster patching — it’s smarter, supported humans making better decisions.”

Apache Fory has a critical RCE vulnerability (CVE-2025-61622) in its pyfory module. An attacker can exploit an unguarded pickle fallback to execute arbitrary code.

A critical RCE flaw (CVSS 10) in Doxense's Watchdoc print management solution allows unauthenticated attackers to execute code and take control of the print server.

Broadcom has patched three flaws in VMware Aria Operations and VMware Tools. The vulnerabilities include privilege escalation and information disclosure.

A new PoC reveals a race condition in Qualcomm's KGSL GPU driver (CVE-2024-38399). Two threads can access the same list simultaneously, leading to a Use-After-Free vulnerability.

Stormshield CTI uncovers ongoing APT35 phishing infrastructure impersonating video conferencing services to target organizations in Israel and other regions.

NCSC exposes RayInitiator, a bootkit for Cisco ASA 5500-X devices without Secure Boot, which deploys the LINE VIPER shellcode loader for persistent and stealthy attacks.

Silent Push details how cybercriminals and APTs are misusing DDNS services for stealthy C2 servers, phishing, and malware delivery. Dozens of high-profile groups are involved.

The new infostealer Acreed is rapidly gaining market share post-Lumma takedown. It uses BNB Smart Chain and Steam profiles for C2, with a focus on crypto theft.

Olymp Loader, a new assembly-based MaaS, has emerged in underground markets. It's a turnkey solution for cybercriminals, with stealth and persistence features.

For this year’s Cybersecurity Awareness Month, GitHub’s Bug Bounty team is offering some additional incentives to security researchers!

This article is about a bug I have found in the KFarms Kamino program. The KFarm program is Kamino’s incentive infrastructure used across…

Aprende a usar Feroxbuster, para el descubrimiento de directorios ocultos, archivos sensibles y endpoints no documentados.

Could we force AI to violate ethical boundaries? (yes, we could!!!) Should we do it though…?

The Weaponization of Artificial Intelligence: A New Era of Global Security Risks Introduction: Artificial Intelligence (AI) has revolutionized industries from healthcare to finance, but its most …

U.S.–China Rivalry and Its Global Implications Introduction The 21st century is witnessing an intensifying rivalry between the United States and China, two global powers whose competition is …

PowerShell is a handy built-in tool on Windows that makes life easier for admins — but it’s also a favourite weapon for attackers. Since…

When organizations hear the term “SOC report,” they often assume it refers to a single, uniform certification. In reality, SOC reports…