I created two challenges focused on AWS cloud security. A total of 89 participants took part in the competition, with zero solves for one…

Dean Alexander Buno, Calvin Zhang, Shakthi Vel Venkatesan

Surfshark Black Friday Sale 2025: Save up to 89% on premium VPN plans. Get Surfshark Starter from $1.69/mo. + 3 bonus months.

I watched this amazing video from the cybersecurity legend, Mikko Hyppönen: DEF CON 31 War Stories — Living Next Door to Russia — Mikko…

Building Signature + Heuristic Defenses for LLMs

This post is mostly for Cybersecurity students that want to improve their password cracking skills while participating in the NCL (National…

From our smartphones and smart home appliances to our WhatsApp chats and YouTube feeds, our lives are interconnected

Określenie to jest sygnałem o niedojrzałości w budowaniu cyberbezpieczenstwa i zespołów defensywnych.

Introduction: Classrooms have gone digital, but behind the glowing screens and smart boards lies a silent threat. Every click, every login…

burpgpt leverages the power of AI to detect security vulnerabilities that traditional scanners might miss. It sends web traffic

A trojanized npm package, https-proxy-utils, was found installing AdaptixC2, an open-source Cobalt Strike clone, on developers' machines.

Microsoft is testing Copilot Actions in Windows 11, enabling AI to manage local files, but warns of risks like cross-prompt injection.

Researchers unveil "Training Solo," a new Spectre-v2 study showing attackers can bypass isolation to self-train branch predictors and steal kernel data.

A new LFI zero-day (CVE-2025-11371) in CentreStack is actively exploited to bypass a previous RCE patch and steal credentials. Patch immediately.

Microsoft revoked over 200 digital certificates abused by Rhysida ransomware to spread malware disguised as legitimate Microsoft Teams installers via SEO poisoning.

A dark web post claims 3TB of data from two Russian SMS aggregators has been stolen, posing a huge risk of mass account takeover via 2FA codes.

A new phishing campaign is impersonating LastPass, Bitwarden, & 1Password to trick users into installing malware & stealing their master passwords.

Microsoft’s 2025 Digital Defense Report details a 32% rise in identity attacks, the weaponization of AI in phishing, and new state-sponsored tactics.

Microsoft's open ExCyTIn-Bench simulates a SOC center to measure AI's ability to investigate complex cyber incidents, going beyond simple knowledge tests.

Windows 11 updates KB5066835 & KB5065789 broke local HTTP/2 connections on 127.0.0.1, causing critical failures for developers and services.

CISA adds a critical, actively exploited Adobe Experience Manager (AEM) RCE flaw (CVSS 10.0) to its KEV catalog, demanding immediate patching.