CrowdStrike patched two flaws in Falcon Sensor for Windows (CVE-2025-42701). Attackers with local code execution can delete arbitrary files, risking system stability.

Deno patched a High-severity flaw (CVE-2025-61787) allowing Command Injection on Windows when spawning batch files. Attackers can execute arbitrary commands via malicious arguments.

Microsoft Threat Intelligence details how APTs abuse Teams and Entra ID integration for recon, vishing, and C2. Attackers use RMM tools and spoofed accounts to breach enterprise environments.

Rapid7 identified the Crimson Collective using TruffleHog to find leaked AWS IAM keys. The group achieves Admin access to steal data from RDS/S3 and extort victims.

Akka.NET patched a Critical (CVSS 9.3) flaw in Akka.Remote (CVE-2025-61778). Missing mutual TLS allows unauthenticated, untrusted clients to connect to secure clusters.

It started as a productivity experiment. I was testing Comet Assistant, excited about the promise of having an AI agent gather information…

Introduction

The nmap out we get from the first scan is indicative of a normal AD environment — LDAP, SMB, Kerberos etc.

Neste artigo, vamos explorar como usar o Autopsy, uma ferramenta gratuita e open source, para investigar logs e Prefetch em sistemas…

⚡Hack to learn, not to harm curiosity is your greatest exploit. 💻🧠

For those who are unaware, Discord’s Zendesk instance was recently compromised. An employee was compromised, which led to everyone’s…

Protecting kids in the digital world begins with informed families.

When people ask, “Can a VPN be hacked?” the truthful answer is yes — but not in the way many imagine. VPNs are among the strongest privacy…

Introduction:

A cyber security course is essentially a structured training program that teaches you how to protect computer systems, networks, and all…

Real Incidents, Practical Defenses, and a Step-By-Step Framework Your Team Can Put in Place Within a Week

By: Greg Diny  10/4/25

Have you ever wished you had access to view everyone’s age or salary in your office, have you also imagined if this information got into…

Vaya que si hay algo que me fastidia y seguramente a muchos de ustedes tambien, es que salga algun pendiente impostergable en el trabajo…

Keep the guardrails that quietly protect your APIs — validation, output schemas, safe CORS, and production-grade error handling.

FIU researchers developed SHIELD, a system allowing drones to detect cyberattacks by monitoring hardware/software and recover mid-flight within 0.36 seconds to complete their mission.