By Emile J Fagerstrom IV #1CallWest #Bofaf #t3

Red Hat confirmed a breach of its consulting division's GitLab after the Crimson Collective claimed to steal 570GB of data, including client network blueprints and auth tokens.

CERT-UA uncovered a campaign (UAC-0245) using Signal to deliver malicious XLL files and inject the full-featured CABINETRAT backdoor. The malware evades sandboxes by checking system specs.

Eufy, the maker of Anker security cameras, ran a controversial program that paid users $2 per video of staged thefts to gather training data for its AI algorithms.

A critical flaw in Milesight industrial routers is being exploited to launch mass smishing campaigns across Europe, exposing 572 devices and using SMS APIs to send phishing links.

Google promoted Chrome 141 to Stable, patching 21 flaws, including two High-severity Heap Overflows in WebGPU (CVE-2025-11205) and Video, which could lead to RCE.

Instagram head Adam Mosseri debunked the microphone myth but confirmed Meta will use user interactions with its AI chatbot to create hyper-targeted ads starting Dec. 16.

Researchers extracted the Intel SGX DCAP attestation key using a sub-$1k hardware interposer. This attack breaks the root of trust, allowing attackers to forge quotes and compromise Web3 ecosystems.

OpenAI's Greg Brockman stated that the world is 3 orders of magnitude from achieving an 'always-on' AI supermind, requiring nearly 10 billion GPUs and sparking a compute scarcity.

TaskHound is a new C# tool for auditing Windows scheduled tasks over SMB. It surfaces high-value tasks running with privileged accounts and exports data to BloodHound for analysis.

A Critical (CVSS 9.8) flaw (CVE-2025-6388) in the Spirit Framework WordPress plugin is being actively exploited, allowing unauthenticated attackers to hijack admin accounts.

Yoast SEO Premium has a stored XSS flaw (CVE-2025-11241) that allows Contributor+ users to inject malicious scripts into posts. All users are urged to upgrade to v26.0 immediately.

Recently, GreyNoise observed a sudden and highly coordinated wave of exploitation attempts targeting CVE-2021-43798, a Grafana path traversal vulnerability that allows arbitrary file reads. The su…

The internet has always been a powerful place for learning, sharing, and growing. Over the years, many platforms have provided valuable…

Navigating the intricate landscape of Windows environments, from standard user privileges to the ultimate administrative control, known…

The rapid rise of large language models (LLMs) has unlocked new possibilities for automation, reasoning, and decision support. However, to…

In this project, I built a mini SOC lab using Wazuh to learn how end-to-end security detection and monitoring systems work. I set up two…

The networks are the backbone of every modern organization. Servers, workstations, applications, and security devices don’t exist in…

A plain-language guide to understanding prompt injection attacks, why they matter for AI security, and what we can do about them.

Introduction