A critical flaw in Milesight industrial routers is being exploited to launch mass smishing campaigns across Europe, exposing 572 devices and using SMS APIs to send phishing links.

Google promoted Chrome 141 to Stable, patching 21 flaws, including two High-severity Heap Overflows in WebGPU (CVE-2025-11205) and Video, which could lead to RCE.

Instagram head Adam Mosseri debunked the microphone myth but confirmed Meta will use user interactions with its AI chatbot to create hyper-targeted ads starting Dec. 16.

Researchers extracted the Intel SGX DCAP attestation key using a sub-$1k hardware interposer. This attack breaks the root of trust, allowing attackers to forge quotes and compromise Web3 ecosystems.

OpenAI's Greg Brockman stated that the world is 3 orders of magnitude from achieving an 'always-on' AI supermind, requiring nearly 10 billion GPUs and sparking a compute scarcity.

TaskHound is a new C# tool for auditing Windows scheduled tasks over SMB. It surfaces high-value tasks running with privileged accounts and exports data to BloodHound for analysis.

A Critical (CVSS 9.8) flaw (CVE-2025-6388) in the Spirit Framework WordPress plugin is being actively exploited, allowing unauthenticated attackers to hijack admin accounts.

Yoast SEO Premium has a stored XSS flaw (CVE-2025-11241) that allows Contributor+ users to inject malicious scripts into posts. All users are urged to upgrade to v26.0 immediately.

Recently, GreyNoise observed a sudden and highly coordinated wave of exploitation attempts targeting CVE-2021-43798, a Grafana path traversal vulnerability that allows arbitrary file reads. The su…

The internet has always been a powerful place for learning, sharing, and growing. Over the years, many platforms have provided valuable…

Navigating the intricate landscape of Windows environments, from standard user privileges to the ultimate administrative control, known…

The rapid rise of large language models (LLMs) has unlocked new possibilities for automation, reasoning, and decision support. However, to…

In this project, I built a mini SOC lab using Wazuh to learn how end-to-end security detection and monitoring systems work. I set up two…

The networks are the backbone of every modern organization. Servers, workstations, applications, and security devices don’t exist in…

A plain-language guide to understanding prompt injection attacks, why they matter for AI security, and what we can do about them.

Introduction

This room will equip us with the knowledge on how attackers discover assets in a network, and how to detect their activity.

A Dutch court ruled that Meta's algorithmic feed violates the DSA and ordered Meta to provide a persistent, non-algorithmic viewing option for Facebook and Instagram users.

Google announced a $4B investment in Arkansas, building its first data center in West Memphis and a 600 MW solar plant to power its expanding cloud and AI infrastructure.