What We’re Targeting

Oh, cheap motels, how lovely your captive portals are. And totally useless, to boot.

Photo by anunay rai on Unsplash

Step-by-step MD2PDF walkthrough showing how an HTML→PDF renderer can be abused for SSRF.

Today I spent some time in my Windows Server lab building a small PowerShell automation script — something simple but practical.

Cybersecurity Alert 2025 - Mass Distribution Underway

في عصر تتقاطع فيه الخصوصية مع الأمن، لم يعد السؤال عن “كيفية استخدام الإنترنت” هو الأهم، بل “كيف نحمي أنفسنا أثناء استخدامه؟” وهنا يبرز…

Lately, I’ve been diving into the world of evasion — not for a cert, not for a client gig, just because I realized something painful: if…

In a major security update, X (formerly Twitter) has announced that users who rely on hardware security keys or passkeys for two-factor…

A complete beginner-friendly roadmap to access bonuses and benefits from X.

ASEC exposed a flaw in Gunra Linux ransomware: its ChaCha20 keys are generated using an insecure time()/rand() seed, potentially allowing victims to brute-force decryption and recover files.

Herodotus is a new Android banking Trojan that evades anti-fraud systems by simulating human input: it inserts randomized typing delays (300-3000ms) during remote-control attacks in Italy and Brazil.

A path traversal flaw (CVE-2025-62725) in Docker Compose lets attackers overwrite host files via remote OCI artifact annotations, triggered by read-only commands.

Kaspersky exposed BlueNoroff's GhostCall/GhostHire campaigns, which use AI-enhanced lures (GPT-4o images) and trojanized apps to target executives and developers, deploying SilentSiphon spyware on macOS.

A flaw (CVE-2025-12080) in Google Messages for Wear OS allows any installed app to send SMS/RCS messages without permission by abusing ACTION_SENDTO intents.

Akamai warns of active exploitation of Magento's SessionReaper flaw (CVE-2025-54236). The critical (CVSS 9.8) vulnerability allows session hijacking and unauthenticated RCE via web shells.

AhnLab exposed Beast ransomware (Monster evolution) as a new RaaS threat, with 16+ victims by August 2025. It uses ChaCha20 encryption, deletes Shadow Copies, and features a hidden GUI control panel.

A Critical (CVSS 10.0) flaw (CVE-2025-61481) in MikroTik RouterOS/SwOS exposes the WebFig management interface over unencrypted HTTP by default, allowing remote credential theft via MitM.

Trend exposed the Water Saci worm, a self-propagating campaign that hijacks WhatsApp Web using Selenium/PowerShell. It uses a stealthy IMAP email C2 channel with HTTP fallback.

AhnLab exposed Rhadamanthys Infostealer hiding in games built with the Ren'Py engine. It uses a fake 1M-second loading screen to distract victims while injecting malware via a malicious Python script.

To understand what a CORS vulnerability is, we first need to know what CORS means and why browsers use it.