Trellix exposed SideWinder APT's campaign against South Asian diplomacy. It uses PDF/ClickOnce lures with a signed MagTek binary to deploy StealerBot for deep intelligence collection.

The Apache Software Foundation has released multiple security patches for Apache Tomcat, addressing three newly disclosed vulnerabilities — CVE-2025-55752, CVE-2025-55754, and CVE-2025-61795 — aff…

Arctic Wolf exposed Caminho, a Brazilian Loader-as-a-Service that hides .NET payloads in images via LSB steganography. It operates filelessly and is deployed via phishing and legitimate Archive.org.

GhostGrab is a hybrid Android malware that steals banking credentials and OTPs via phishing WebView overlays while secretly running a Monero miner in the background to monetize the victim's device.

Netskope found the RedTiger Python tool repurposed as an infostealer targeting gamers. It uses Discord injection to steal tokens/payment data and GoFile for anonymous data exfiltration, spamming files/processes for evasion.

iOS 26.1 introduces a new PhotoKit feature that allows third-party apps like Google Photos to upload media seamlessly in the background, even when the phone is locked.

Microsoft’s latest Bing Wallpaper update covertly launches Bing Search when users click the desktop, appearing to artificially inflate the search engine’s traffic.

When Your Bug Bounty Gets Stolen: A Guide to Reclaiming What’s Rightfully Yours The Dark Side of Cybersecurity Research Bug bounty programs were created to incentivize ethical hackers and security …

ParamSpider: Herramienta para el reconocimiento pasivo y extracción URLs con parámetros. Esencial para descubrir XSS, SQLi y LFI

Este informe detalla la secuencia de eventos que condujo al compromiso exitoso de la aplicación web alojada. El ataque combinó técnicas de…

Are You Worried About Databases Hacked? And Benefits of Blackhatclique: Database hacking involves exploiting vulnerabilities in database systems to gain unauthorized access to sensitive data. Here's …

The Day the Cloud Went Dark

Excerpt:

Using 591Lab’s CISSP Certification Guide to Unlock Excellence in Cybersecurity.

As media becomes a more central focus in the lives of the newest generations, a visible trend regarding cyber security has arisen: a…

The modern world runs on whispers. The constant, low-power data transmissions from our wearables, smart locks, and industrial sensors are…

Let’s be honest — integrating Sysmon with Splunk sounds easy until you try it. Then suddenly you’re knee-deep in XML logs, forwarder…

⚠️ Disclaimer ⚠️ This write-up is for educational purposes only. It is meant to explain the thought process and steps taken to solve the…

Ou sobre ter gasto meu tempo para você poupar o seu

🔍 Lab Overview

1. Introduction