Microsoft is discontinuing support for embedded SVG images in Outlook for the web and Windows to mitigate XSS and other security risks. The change is being gradually rolled out.

Microsoft released the Windows 11 2025 Update (25H2) via an enablement package. The release removes PowerShell 2.0 and WMIC and adds new AI-assisted security features.

The FlipSwitch rootkit uses bytecode modification to intercept syscalls in Linux kernel 6.9, bypassing the new switch-based dispatcher that rendered traditional sys_call_table hooking useless.

OpenSSL 3.6 has been released, adding support for NIST security categories for PKEY objects, LMS signatures in FIPS, and deprecating ANSI-C compiler support.

A Chinese court sentenced 11 principal members of Myanmar's Min Clan crime syndicate to death for organized crime, fraud, and the deaths of scam workers.

A BBC journalist was targeted by the Medusa ransomware group, offered 25% of a ransom, and subjected to MFA bombing to force him to become a corporate insider threat.

Cleafy uncovers Klopatra, a new Android RAT using commercial Virbox obfuscation and native code to target banks in Spain/Italy, allowing invisible remote device control.

I’m not gonna sugarcoat it, the EWPTX is a long grind, but it’s a fair exam. if you’ve been doing web hacking for real, this test won’t…

Capture 1: Price of Monolith to Microservices

Summary

By: Matthew Welsh

By Matthew Welsh

Introduction: The air in the boardroom crackled with anticipation. Our CEO, a charismatic leader with an eye for innovation, had just…

Vladimir Tsakanyan

I’ve decided to spend late Q4 and early Q1 2026 focused on building cloud projects to grow my AWS skills. This is my second project in AWS…

In late September 2025, a fire tore through a government data center in South Korea, bringing down more than ninety critical public…

It has been a long time since I wrote the Part I, Part II was supposed to come out in a month but sometimes life takes us on a different…

Is that email really from your bank?

Questions:

A flaw in the Unity Runtime (CVE-2025-59489) allows local code execution in games via DLL injection through the Android intent handler. Developers must rebuild their apps.

The UK consumer group Which? filed a £480M lawsuit against Qualcomm, alleging the chipmaker used its dominance to charge excessive fees, inflating prices for Apple and Samsung users.