Herkese selamlar. Bu yazımda, Microsoft Azure üzerinde kurduğum ve bir web sunucusundan başlayarak Active Directory içerisinde Domain Admin…

From broken authentication to logging failures, this story-driven guide reveals how I nearly shipped insecure code — and the exact habits…

This document summarizes key cyber threats identified between September 22 and 28, 2025, including related threat events

With the rise of cyberattacks and data breaches, it’s never been more important to ensure your organization is protected against hackers.

John Muddle’s top five tips for overcoming DoD compliance challenges.

The Hidden Roadblocks: Why Quantum Computing Still Isn’t Ready for Prime Time Quantum computing has been hailed as the next revolution in technology — one that could upend entire industries …

By Ivan Tan (Div0-N0H4TS Community Team Member), Edited by Zara Teo (Div0-N0H4TS Community Lead)

How to recognize the manipulative language patterns before you become another statistic

As organizations increasingly rely on digital infrastructure, safeguarding data has become a strategic imperative. Information Assurance…

This is a walkthrough of SQLMap: The Basics from TryHackMe

NVIDIA patched multiple flaws, including a critical DLS bug (CVSS 8.7) allowing unauthenticated access and DoS, and a privilege escalation flaw (CVSS 7.8) in the NVIDIA App.

Amazon unveils Alexa+, an AI-powered upgrade for Echo, Fire TV, and Kindle, evolving from voice commands to a true digital concierge.

OpenAI launched Sora, a new short-video platform built on its Sora 2 model that generates video and audio content. The AI-first service is currently invite-only on iOS.

OpenAI launched Instant Checkout in ChatGPT, powered by the new Agentic Commerce Protocol (with Stripe). The feature allows users to complete purchases within the chat.

The malicious PyPI package SoopSocks masqueraded as a SOCKS5 proxy but secretly installed a Go-based backdoor with SYSTEM privileges, leaking system data to a Discord webhook.

A critical flaw (CVE-2025-7493) in FreeIPA allows authenticated users to exploit Kerberos alias checks to gain full domain administrator privileges. Patch to v4.12.5 now.

Unit 42 uncovers Phantom Taurus, a new Chinese APT using the fileless NET-STAR backdoor to target SQL databases and IIS servers in global espionage campaigns.

Patchwork APT has launched a new campaign in South Asia, exploiting DLL sideloading and obfuscation to deliver malware that masquerades as VLC media player for deep espionage.

OpenSSL patches three flaws, including CVE-2025-9230 (RCE/DoS risk) and a SM2 timing side-channel (CVE-2025-9231) that could allow private key recovery on ARM64.

Cleafy uncovers Klopatra, a new Android RAT using commercial Virbox obfuscation and native code to target banks in Spain/Italy, allowing invisible remote device control.Export to Sheets