The TigerJack group is attacking developers via malicious VSCode extensions on OpenVSX. Plugins secretly steal C++ source code in real-time and deploy the CoinIMP cryptojacker.

Firefox 144 is out, featuring Profile Management for separate browsing contexts, AES-256 password encryption, Google Lens visual search, and Perplexity AI integration.

Microsoft released the final Windows 10 update (KB5066791), marking the end of free support. The patch fixes six zero-days and retires the ltmdm64.sys driver. Users must enroll in ESU for patches.

Microsoft released its final Windows 10 update, fixing 172 flaws, including six zero-days. Three were actively exploited, including privilege escalation flaws in the Agere Modem Driver (removed) and RASMan.

Kaspersky analyzed 11,000+ hacktivist messages in 2025, finding groups act on threats within days/weeks. DDoS is the core attack (61%), driven by a constant search for maximum publicity.

Google released Veo 3.1, an advanced AI video model with stronger prompt adherence, Image-to-Video generation from start/end frames, and a new capability for generating synchronized audio.

🧩 Session Persistence Vulnerability: When Logging Out Doesn’t Really Log You Out 🕵️‍♂️ Discovered by: MR. HACKER / Bug Bounty Hunter --- 🧠 Summary During a security assessment of a …

Master the art of identifying business logic vulnerabilities before attackers exploit them in your applications

Introduction

by Shashank M

by Shashank M

Objective and Scope

Introduction: From Hackers in Hoodies to Heroes in Suits

james-admin->change password->connect pop3->password leaking->ssh->bypass rbash->pspy

OpenSSH “Ping Flood DoS” — Pre-Authentication Resource Exhaustion Attack

The Qualys TruRisk Platform:how Qualys unifies vulnerability management, compliance, and cloud security — helping teams secure hybrid…

Utilizing ALEAPP to analyze Android device artifacts, reconstructing a victim’s financial details, movements, and communication patterns.

From a compromised WhatsApp group to a Man-in-the-Middle attack, this is the story of how a sophisticated Android malware uses deception…

มัลแวร์ “Stealit” รูปแบบใหม่ แฝงตัวในโปรแกรมติดตั้งเกมและ VPN เถื่อน

In an era where data breaches, insider threats, and sophisticated cyberattacks dominate headlines, enterprises are turning to…

10 Critical AI Risks You Must Reverse Now!