Decrypting a Hidden AES-128-CBC Blob Inside an ELF

The point of directory busting is finding directories you don’t know exist.

Advanta Advisory is driven to support organisations that take Governance, Risk and Compliance seriously, without the guesswork or…

When faced with a vast amount of data, our first goal is to make sense of it. We use “descriptive statistics” to summarize complex datasets…

CVE–2025–25291: The SSO flaw that opens Terraform Enterprise to Account Takeover I was recently tasked to perform a penetration test on a web application running Terraform Enterprise for a …

Part 3 of The Cyber Defense Playbook Project

The question isn’t if your organization will face a cyber incident — it’s when. This reality has shifted the conversation from traditional…

TL;DR: That uncanny feeling you get online is real. The internet is being flooded with AI content that’s better at mimicking humans than…

Today marks the end of my 30-day cybersecurity challenge, but the learning doesn’t stop here.

Check Point exposed four critical flaws in Microsoft Teams. Attackers could forge executive caller IDs, silently edit messages without trace, and spoof notifications for BEC and espionage.

GreyNoise tracked a coordinated cryptojacking blitz exploiting PHP RCE flaws (CVE-2024-4577, ThinkPHP) to deploy miners on cloud infrastructure. The spike is driven by high Bitcoin prices.

CERT Polska exposed NGate, an Android malware that tricks users into tapping their card against their phone to steal NFC EMV data and PINs. The data is then relayed to an ATM for cash withdrawal.

Trustwave confirmed the "Trinity of Chaos" alliance (Scattered Spider, LAPSUS$, ShinyHunters) launched a federated EaaS model for high-profile extortion, driven by performance, theatrics, and insider recruitment.

CISA added two critical, actively exploited flaws to its KEV Catalog: Gladinet LFI (CVE-2025-11371) risks RCE via machine key theft, and CWP RCE (CVE-2025-48703) allows unauthenticated admin takeover.

Google Translate rolled out a Gemini-powered "Advanced" mode that sacrifices speed for higher accuracy and contextual fluency. The feature is currently limited to select language pairs like English/French/Spanish.

China's RedDrip exposed APT zero-day exploitation of Android email clients, achieving 1-click RCE via the ZipperDown flaw to steal account tokens and compromise targets around the Korean Peninsula.

A Critical RCE flaw (CVE-2025-11953, CVSS 9.8) in React Native Community CLI allows unauthenticated attackers to execute arbitrary code via a command injection in the exposed Metro Dev Server.

A Critical (CVSS 9.8) LFI flaw (CVE-2025-12493) in ShopLentor (WooCommerce Builder) allows unauthenticated attackers to run arbitrary .php files and compromise 100K+ e-commerce sites.

CTF — Based

Advanced mapping of API vulnerabilities with OWASP Top 10 and CVSS. Details reconnaissance phases and defense evasion techniques.

An easy OSINT demo and safety guide