Resecurity exposed Qilin RaaS's reliance on bulletproof hosting (BPH) in Russia/HK. The same network was linked to the Asahi Group Holdings ransomware attack that stole 27 GB of data.

Kaspersky exposed Maverick, a sophisticated fileless banking Trojan targeting Brazil. It hijacks WhatsApp Web using WPPConnect for self-propagation and installs phishing overlays to steal UPI/banking data.

Google Cloud launched Gemini Enterprise, a platform unifying models, governance, and a no-code workbench. It empowers employees to build AI agents to optimize factories and supply chains.

A new Zero-Click NTLM leak bypasses Microsoft's LNK patch, allowing unauthenticated NTLM hash theft on patched systems. The PoC works by exploiting UNC paths and the default shell32.dll icon reference.

Meta announced a $1.5B investment for a 1-gigawatt AI data center in El Paso, Texas, operational in 2028. It's part of a massive $72B CapEx plan to lead the global AI infrastructure race.

Building OS command injection payloads to save time in a CTF environment

Every breach starts with something small.
A missed patch. A link in an email. An unused control. A moment of inattention.

Phishing (MITRE ATT&CK T1566) is one of the most dominant and versatile initial access vectors for cybercriminals to exploit. Attackers use…

NOTE: In my past roles within Cyber Security, I assisted investigations / incident response initiatives where my role to provide some…

Lidar com senhas expostas em repositórios é um problema evidente em (quase) todas as empresas que desenvolvem software. A dificuldade de…

Cybersecurity has evolved from a protective measure into a strategic priority. A recent global study conducted in partnership with…

🎯 KENAPA BANYAK HUNTER GAGAL DI GOOGLE

PolarDNS is an open-source authoritative DNS server written in Python 3. It's designed for security testing of DNS resolvers/clients by creating malformed and non-compliant DNS responses over UDP/TCP.

ScrapPY is a Python utility for scraping manuals, documents, and other sensitive PDFs to generate targeted wordlists that can be utilized

Windows 10 support ended, leaving 400 million incompatible PCs without security patches. Critics warn the purely commercial decision risks a global e-waste crisis and a WannaCry-like attack surge.

Trend Micro exposed ZeroDisco, a sophisticated op exploiting Cisco SNMP RCE (CVE-2025-20352) to install Linux rootkits on switches, setting a volatile universal "disco" password and erasing logs.

Hackers breached Harrisburg International Airport's public address system to broadcast a pro-Palestine message. The system was shut down immediately, and all flights resumed after a safety check.

Over the past two decades, China’s vulnerability research industry has evolved from a disorganized network of enthusiasts into a highly structured ecosystem deeply intertwined with state interests…

At Salesforce’s annual technology conference, Dreamforce, Google and Alphabet CEO Sundar Pichai openly reflected on the moment when OpenAI launched ChatGPT, admitting—rarely for him—that he believ…