ShellGPT is a command-line interface (CLI) tool that integrates OpenAI’s GPT models directly into your terminal environment, allowing users…

When I was 3, I’d sneak into my parents’ computer center and change every desktop background I could find!

RPC Investigator (RPCI) is a .NET/C# Windows Forms UI application that provides an advanced discovery and analysis interface to Windows RPC endpoints

F5 confirmed a breach by a "highly sophisticated nation-state" that stole BIG-IP source code and internal vuln info. The attack was contained, and F5 is pushing patches and free CrowdStrike EDR licenses.

A 16-country probe exposed First Wap's Altamides, a global surveillance tool that exploited the SS7 protocol to secretly track phone numbers and intercept private military, corporate, and T-Mobile communications.

Mozilla launched a free, built-in VPN beta for Firefox desktop users to conceal IP and encrypt traffic. The timing is influenced by the UK Online Safety Act and growing privacy concerns.

Pavel Durov warned Telegram users in France about an EU push for message scanning, stating the platform will leave the market rather than weaken encryption or violate fundamental human rights.

ReliaQuest exposed Flax Typhoon (China-backed APT) for a year-long breach, where it modified an ArcGIS Java SOE into a web shell and embedded it in backups for resilient persistence.

The TigerJack group is attacking developers via malicious VSCode extensions on OpenVSX. Plugins secretly steal C++ source code in real-time and deploy the CoinIMP cryptojacker.

Firefox 144 is out, featuring Profile Management for separate browsing contexts, AES-256 password encryption, Google Lens visual search, and Perplexity AI integration.

Microsoft released the final Windows 10 update (KB5066791), marking the end of free support. The patch fixes six zero-days and retires the ltmdm64.sys driver. Users must enroll in ESU for patches.

Microsoft released its final Windows 10 update, fixing 172 flaws, including six zero-days. Three were actively exploited, including privilege escalation flaws in the Agere Modem Driver (removed) and RASMan.

Kaspersky analyzed 11,000+ hacktivist messages in 2025, finding groups act on threats within days/weeks. DDoS is the core attack (61%), driven by a constant search for maximum publicity.

Google released Veo 3.1, an advanced AI video model with stronger prompt adherence, Image-to-Video generation from start/end frames, and a new capability for generating synchronized audio.

🧩 Session Persistence Vulnerability: When Logging Out Doesn’t Really Log You Out 🕵️‍♂️ Discovered by: MR. HACKER / Bug Bounty Hunter --- 🧠 Summary During a security assessment of a …

Master the art of identifying business logic vulnerabilities before attackers exploit them in your applications

Introduction

by Shashank M

by Shashank M

Objective and Scope