ClamAV 1.5.0 introduces FIPS mode support for signature verification and upgrades clean file caching to SHA-256 to meet strict cryptographic compliance standards. Update now.

A Critical (CVSS 9.8) flaw (CVE-2025-5947) in the Service Finder Bookings plugin allows unauthenticated attackers to gain Admin access via cookie manipulation. Over 13,000 exploit attempts recorded.

Google has confirmed that the Gemini Nano on-device AI model is blocked from running on Android devices with an unlocked bootloader, citing a feature not found error.

Google/Mandiant linked CL0P extortion to a Zero-Day RCE flaw (CVE-2025-61882) in Oracle E-Business Suite. Attackers exploited the bug since July to steal corporate data and deploy GOLDVEIN Java shells.

A Zero-Day LFI flaw (CVE-2025-11371) in Gladinet/Triofox is being actively exploited. Attackers retrieve the Web.config machine key to chain into an unauthenticated RCE exploit.

NVIDIA released an urgent update for its GPU Display Driver, fixing multiple high-severity flaws including RCE via an uncontrolled DLL loading path (CVE-2025-23309). Update now.

Trend Micro discovered RondoDox, a new botnet leveraging 50+ exploits (including the Pwn2Own TP-Link flaw) in an "exploit shotgun" approach to compromise routers, DVRs, and IoT globally.

Cisco Talos confirms Storm-2603 is abusing the DFIR tool Velociraptor for persistence and arbitrary code execution, deploying LockBit and Babuk ransomware against VMware and Windows servers.

MediaTek's October Security Bulletin discloses multiple High-severity flaws in its WLAN and GNSS chipsets, including buffer and stack overflows that risk RCE via memory corruption.

Expel uncovered a phishing attack using Cache Smuggling to deliver malware. The technique uses a fake Fortinet lure and PowerShell to execute a payload staged in the browser's cache, bypassing network detection.

A flaw (CVE-2023-28760) in TP-Link AX1800 routers allows unauthenticated attackers on the LAN to gain root RCE by manipulating the MiniDLNA service via a USB drive.

Huntress exposed a covert campaign using log poisoning on exposed phpMyAdmin to deploy a web shell and the Nezha monitoring tool, ultimately delivering the Ghost RAT backdoor to 100+ victims in Asia.

I found DoS by JS crash, disallowing anyone to view anyone’s profile and HTML Injection.

This comprehensive guide explores the pivotal role of Linux in advanced cybersecurity operations, detailing essential tools, attack…

Advanced Google Dorks to find exposed sensitive information

Macs have long carried a reputation for being the “safe” choice — sleek design, fewer viruses and a promise of reliability. But…

For many startups and growing businesses, identity management begins with simple, cost-effective solutions like Google Workspace. As…

Why mastering your timing matters more than mastering your tools.

The Shift from Reaction to Action

Exploring how attackers leverage Tycoon 2FA to capture credentials, bypass MFA, and gain unauthorized access to cloud services.