Cisco Talos confirms Storm-2603 is abusing the DFIR tool Velociraptor for persistence and arbitrary code execution, deploying LockBit and Babuk ransomware against VMware and Windows servers.

MediaTek's October Security Bulletin discloses multiple High-severity flaws in its WLAN and GNSS chipsets, including buffer and stack overflows that risk RCE via memory corruption.

Expel uncovered a phishing attack using Cache Smuggling to deliver malware. The technique uses a fake Fortinet lure and PowerShell to execute a payload staged in the browser's cache, bypassing network detection.

A flaw (CVE-2023-28760) in TP-Link AX1800 routers allows unauthenticated attackers on the LAN to gain root RCE by manipulating the MiniDLNA service via a USB drive.

Huntress exposed a covert campaign using log poisoning on exposed phpMyAdmin to deploy a web shell and the Nezha monitoring tool, ultimately delivering the Ghost RAT backdoor to 100+ victims in Asia.

I found DoS by JS crash, disallowing anyone to view anyone’s profile and HTML Injection.

This comprehensive guide explores the pivotal role of Linux in advanced cybersecurity operations, detailing essential tools, attack…

Advanced Google Dorks to find exposed sensitive information

Macs have long carried a reputation for being the “safe” choice — sleek design, fewer viruses and a promise of reliability. But…

For many startups and growing businesses, identity management begins with simple, cost-effective solutions like Google Workspace. As…

Why mastering your timing matters more than mastering your tools.

The Shift from Reaction to Action

Exploring how attackers leverage Tycoon 2FA to capture credentials, bypass MFA, and gain unauthorized access to cloud services.

When your web app goes live, the browser becomes your first line of defense.

2025年7月，香港證監會的數碼鑑證專家Henry Liu在“第二屆國際數碼法理鑑證挑戰賽”中獲得銅獎，該比賽由香港大學計算與數據科學學院，警方網絡安全及科技罪案調查科，國際刑警組織，以及領先的鑑證科技公司合辦和支持。我們邀請了Henry分享他的鑑證工作經驗。

Meet our award-winning digital forensic specialist — Henry Liu! In July 2025, Henry won the bronze award at the 2nd International Digital…

It’s not just for criminals. Learn how the same tech protects dissidents and enables a billion-dollar shadow economy.

I wanted to share my experience with Tyler Ramsbey’s latest BAS (Breached Attack Scenario) machine — I’ve been a fan of his YouTube…

msLDAPDump simplifies LDAP enumeration in a domain environment by wrapping the lpap3 library from Python in an easy-to-use interface

A UAF flaw in the Linux kernel TLS subsystem allows a low-privileged user to gain RCE by exploiting memory corruption during asynchronous decryption.