Evernote v11 is a massive relaunch under Bending Spoons, adding an OpenAI AI Assistant and long-awaited Semantic Search to redefine the note-taking experience for users.

AWS patched a Critical (CVSS 9.3) local flaw (CVE-2025-11462) in its Client VPN for macOS. A non-admin user can gain root privileges via a symlink manipulation attack.

A Critical (CVSS 9.9) flaw (CVE-2025-44823) in Nagios Log Server allows any authenticated user to retrieve plaintext administrative API keys, leading to full system compromise. Update now.

CISA added the Zimbra XSS zero-day (CVE-2025-27915) to its KEV Catalog due to active exploitation since January. Attackers use malicious .ICS files to steal mail data.

OpenSSH (before 10.1) has a flaw (CVE-2025-61984) that allows RCE when ProxyCommand is used. Attackers exploit control characters in usernames to inject commands.

Chrome 141.0.7390.65/66 is released, patching High-severity memory flaws: CVE-2025-11458 (Sync Heap Overflow) and CVE-2025-11460 (Storage UAF), risking RCE. Update immediately.

A China-nexus APT, Mustang Panda, is targeting the Tibetan community using DLL sideloading and the EnumFontsW API to launch the stealthy Publoader backdoor and achieve persistence.

A step‑by‑step look at uncovering a hidden access‑control issue, validating it safely, and writing a report that gets paid — essential…

Hey there!😁

The 1990s-era text file you’re still ignoring might be exposing your entire backend infrastructure in 2025.

Even experienced computer users and small business owners often make a hidden network mistake that hackers love. While most people focus on…

Hey, I’m Shaheer aka Maverick and wow, diving into the ProtoVault Breach during OffSec Gauntlet CTF 2025 was an absolute thrill. This…

The evolution of security policies represents a fundamental shift in how organizations protect digital assets, moving from static, reactive…

Configuration code and application code both need to be treated with the same rigor as any other software. Bugs in configuration can be…

Story

The rise of autonomous AI agents is reshaping the enterprise landscape, but not without introducing a formidable new attack surface. This…

How a technology built to generate images is now reshaping the future of digital defence.

Have you ever seen a gadget, app, or program and thought, “How does this work”. That curiosity is the main idea behind reverse engineering.

This CTF-style box is catered toward beginners looking to put their skills to practice. The Men In Black-esque theme gives it personality…