CYBER SECURITY CLASS REVIEW ON 21ST OF OCTOBER, 2025 General Kali commands: CD PWD LS Touch /root /etc /Home /LIB Cat Mv rm Mkdir Whoami The command for steganography is Steghide(for encryption) and …

While the full scope of the breach remains under investigation, state officials confirmed that some data was exfiltrated, though the…

IAR: The Trading Platform That Builds Strength Through Recovery In the ever-changing world of online trading, success isn’t just about winning — it’s about bouncing back after setbacks …

A fake "Safe Downloader" on the official Xubuntu site contained a crypto clipper trojan, forcing the distribution to take its downloads page offline.

XSS Exploitation Tool is a penetration testing tool that focuses on the exploitation of Cross-Site Scripting vulnerabilities.

South Korea confirms a major cyberattack on the Onnara document system and GPKI certificates, two months after the breach was detected.

CISA warns that a critical Windows SMB flaw (CVE-2025-33073) is actively exploited, allowing authenticated attackers to gain SYSTEM privileges.

The Everest ransomware group claimed the attack on Collins Aerospace, alleging theft of 50GB of data, following the airport check-in system failures in September.

A US federal court granted a permanent injunction, banning NSO Group from all future attempts to access WhatsApp, concluding a 6-year legal battle.

Tor Browser v15.0a4 removes all of Mozilla's built-in AI/ML components, prioritizing user anonymity and privacy over potential black-box risks.

Over 269,000 F5 BIG-IP devices are exposed on the internet after F5 revealed hackers stole source code and undisclosed vulnerability data. Patch immediately.

Google officially terminates its Privacy Sandbox initiative, dismantling all key components after years of development failed to replace tracking cookies.

Functional public exploits for two critical 7-Zip flaws (CVE-2025-11001/11002) allow file injection & RCE on Windows. Update to v25.00 immediately.

Opera's new experimental browser, Neon, is now a paid product, featuring three distinct, and sometimes confusing, AI agents that control browsing actions.

A new Linux NTFS driver, NTFSPLUS, is proposed to replace NTFS3, offering faster multithreaded performance and a clearer codebase for better maintenance.

Google Project Zero disclosed a critical zero-click flaw (CVE-2025-54957) in the Dolby decoder that allows RCE on Android via malformed audio messages.

Anthropic releases a web-based version of its popular Claude Code AI assistant, now available to Pro and Max subscribers, challenging GitHub Copilot.

X is launching a pay-as-you-go API subscription, calculating charges based on tweets read and posted, after fixed $42,000/month fees deterred users.

A critical Windows 11 update bug is causing Kerberos and NTLM authentication to fail due to a new, strict SID verification mechanism.

The Sleeper Agent Bug: How One HTML Payload Lay Hidden for Months to Attack My Inbox ⏳ A short recon story about a delayed HTML injection, a surprising phishing vector, and why every output channel …

As I continue my love-hate relationship with XSS, I am slowly but surely building a better understanding of more advanced XSS techniques. I…