Apple overhauled its Security Bounty program, offering a $2M base reward (up to $5M with bonuses) for zero-click exploits that match mercenary spyware attacks and bypass Lockdown Mode.

The UK's CMA gave Google Strategic Market Status (SMS) over its 90% search dominance. The designation grants the regulator new powers to mandate changes in Google's search and AI services.

Kerberoasting is a way of stealing and cracking service account password hashes offline.

System Administration

When digital trust becomes the most dangerous vulnerability of the twenty-first century

The Twilight of the Invisible Perimeter

The invisible threads of control

Authors: Emmanuel Adetiba, Boladele Akanle, Priscilla Ajayi, Comfort Lawal, Faith O. Sweetwilliams, John Wejin

Part 3 of my LLM safety experiments — bringing context awareness to Inj3ctStop.

From discovery to root using ICMP-based techniques.

In today’s digital world, most companies no longer work inside four walls. Employees log in from home, coffee shops, airports, or anywhere…

Learn about common Windows file systems and forensic artifacts in the file systems.

BerylEnigma is a CTF + penetration testing toolkit, mainly to achieve some common encryption and coding functions

Huntress discovered active exploitation of an unpatched LFI zero-day (CVE-2025-11371) in Gladinet/Triofox. Attackers chain the flaw to steal the machine key and achieve RCE without authentication.

Apple doubled its top reward to $2M (up to $5M with bonuses) for zero-click exploits that mimic mercenary spyware and bypass Lockdown Mode protections. The new rules take effect in November.

Zimperium exposed ClayRat, an Android spyware that spreads rapidly by auto-sending malicious links to contacts. It spoofs popular apps like WhatsApp and TikTok and steals SMS/call logs.

Cisco Talos confirms Storm-2603 is abusing an outdated Velociraptor build (CVE-2025-6264) for persistence and arbitrary code execution, deploying LockBit and Babuk ransomware.

Microsoft warns of Storm-2657, a financial crime group exploiting weak MFA via AiTM phishing. The group hijacks university accounts to reroute salary payments through Workday HR and conceal tracks.

Researchers at FireTail have discovered the resurrection of an old-class flaw — ASCII Smuggling — now resurfacing in

Critical flaws (CVE-2025-11001 & CVE-2025-11002) in 7-Zip allow unauthenticated RCE when extracting malicious ZIP files. Attackers can overwrite system files via directory traversal. Update to v25.00.

A critical flaw (CVE-2025-59145, CVSS 9.6) in GitHub Copilot allowed zero-click data theft. Attackers injected hidden prompts into pull requests, which the agent obeyed to exfiltrate private code via the Camo image service.