Herkese tekrardan merhabalar,

⚠️ Wallets Just Lost $21 Million in One Hour, And It Could Happen to Yours! On Oct 10, 2025, news broke that one of Hyperliquid’s wallets was hacked and drained of over $21 million worth of …

Logging into your email, filling an online form, or signing up on an online platform, I am super sure you have come across this big guy…

Overview

A Windows DFIR Challenge Using Arsenal Image Mounter, FTK Imager, Detect It Easy, ProcMon, CyberChef, and Eric Zimmerman’s Tools

درک من از مباحث لایه Internet در کتاب Network+ در فصل ششم کتاب Network+ مباحث مربوط به لایه اینترنت (Internet Layer) از مدل TCP/IP …

En las investigaciones digitales, la dirección IP pública continua siendo uno de los elementos más valiosos para determinar la trazabilidad…

Learn how to use Redline to perform memory analysis and to scan for IOCs on an endpoint.

Hi and welcome again in this discussion we will how to solve PasteZone

Learn how to use Autopsy to investigate artefacts from a disk image.

Learn about the common forensic artifacts found in the file system of Linux Operating System.

Learn about common Windows file systems and forensic artifacts in the file systems.

Introduction to Windows Registry Forensics.

Introductory room for the DFIR module.

Cypher is a medium-difficulty Linux machine that requires exploiting a cypher injection vulnerability on a login page.

FortiGuard Labs identified a new Stealit malware variant abusing Node.js SEA for stealthy distribution. The campaign features a public C2 panel and uses Telegram for data exfiltration.

Forescout found pro-Russian hacktivist group TwoNet fabricated critical infrastructure attacks after compromising a honeypot, exploiting a default login, and pushing the false claim on Telegram.

A Critical RCE flaw (CVE-2025-61929) in Cherry Studio allows attackers to execute arbitrary commands by exploiting a one-click weakness in its custom URL protocol handler.

Microsoft warns of Storm-2657, a financial crime group exploiting MFA flaws to hijack university employee accounts, rerouting salary payments through third-party HR platforms like Workday.

A Critical (CVSS 9.3) flaw (CVE-2025-61928) in Better Auth allows unauthenticated attackers to create/modify API keys for any user, risking full account compromise.

Trend Micro discovered that Axis Communications leaked hardcoded Azure SAS tokens in a signed DLL for its Autodesk Revit plugin, exposing three cloud storage accounts to unauthorized access.