How a Simple Email Nearly Compromised a Whole Network

kali ini kita akan mengerjakan soal boot to root lagi, disini nama soal yang akan kita kerjakan ialah Pwn The Tron: 1. challenge ini…

Hello everyone! My name is Arfat Khan, and I run a YouTube channel called Arfi Tutorials. I am a bug bounty hunter, penetration tester, and…

OFAC sanctioned 8 individuals and 2 banks linked to North Korea for laundering millions in stolen crypto and IT earnings to fund Pyongyang's WMD and missile programs.

OCI patched three critical runc flaws allowing container escape and host DoS/RCE. Attackers exploit mount race conditions in maskedPaths and /dev/console bind-mounts. Update to v1.2.8+.

Sekoia exposed a campaign exploiting compromised Booking.com/Expedia accounts to deliver PureRAT malware via a ClickFix lure. Attackers use authentic reservation details to steal guest credentials.

Cisco patched a High-severity DoS flaw (CVE-2025-20343) in ISE that allows unauthenticated remote attackers to crash the server via crafted RADIUS requests. Disable the Reject setting as a workaround.

Darktrace exposed a DragonForce RaaS attack on a manufacturer. The multi-phase intrusion used brute force and OpenVAS for recon, then exfiltrated data over SSH to a Russian-based malicious host.

AWS patched a High-severity flaw (CVE-2025-12779) in the WorkSpaces client for Linux. A local user can extract DCV authentication tokens to hijack another user’s virtual desktop session. Update to v2025.0.

ASEC exposed Cephalus, a Go-based RaaS group attacking RDP. The malware uses VirtualLock, XOR encryption, and a fake AES key pattern to severely complicate memory and forensic analysis.

tldr: bug bounty allowed me to start my career in offensive security early.

⚠️ Summary of prefetch-src (Deprecated)

🧩 What is Content-Security-Policy: object-src?

Bug Bounty Hunting — Complete Guide (Part-129) 🎵 What is Content-Security-Policy: media-src? The media-src directive is a part of the HTTP Content Security Policy (CSP) header that specifies the …

Zero-day vulnerabilities rank among the most critical threats in the cybersecurity landscape.

When conducting red team operations, what you see matters just as much as what you scan. While traditional reconnaissance often focuses on…

A few months ago, XBOW made headlines after raising $117M to develop AI hacking agents — software that targets your systems the same way…

It starts innocently. An employee is stuck on a tricky client email or a piece of code. They open ChatGPT, paste a few lines and hit enter…

As we step deeper into the age of AI and automation, cybersecurity is no longer an option — it’s a necessity.

Trust your inner firewall.

## Task 1—Introduction