Bir önceki yazımızda ls, cd, rm gibi komutlarla Kali Linux üzerinde dosya ve dizinleri nasıl yöneteceğimize bakmıştık. Yeni klasörler…

From Three Million Bricks to Three Million Transactions!

Hi Everyone,

During a routine security assessment of the Sogexia Android application, a vulnerability was identified involving hardcoded encryption keys…

A tale of persistence, creativity, and why defense in depth matters

A writeup for “CRM Snatch” on TryHackMe

Introduction

Something interesting happened in the Tomcat ecosystem on October 27, 2025 that hasn’t ever happened before.

Tips, Tools & Techniques used by Hackers, Scammers, & Coworkers to Track & Exploit Files, Links, & More… yet, How to Avoid Falling for…

Hello guys, this is Mousa AKA 0xDolphin. I took part with my amazing team Ast3roids in CyCTF 2025 — hosted by the amazing CyShield…

محاولة لطيفة باللغة العربية - إنتاجي الأول!

When I started learning about cloud computing, one principle stood out to me, the Principle of Least Privilege.  It simply means: give…

GZR Observer — Global Daily — India Perspective Nov 10, 2025 Russia Dismantles Pakistan’s Intelligence Spy Ring Targeting Air Defence Technology United States Domestic Politics And …

The maintainers of SuiteCRM, the popular open-source customer relationship management (CRM) platform, have released an urgent security update addressing two significant SQL injection vulnerabiliti…

Australia imposed sanctions and travel bans on four entities and one individual for engaging in cybercrime to fund North Korea's WMD and missile programs. The regime stole $1.9B in crypto in 2024.

CRIL exposed fileless phishing using malicious HTML attachments. Credentials are stolen via a fake Adobe login and instantly exfiltrated to Telegram bots, bypassing traditional domain filters.

Devolutions patched two flaws in Devolutions Server: A Critical (CVSS 9.4) Auth Bypass allows user impersonation via pre-MFA cookie replay, and another flaw leaks plaintext passwords to view-only users.

A Critical (CVSS 9.8) flaw (CVE-2025-59396) in WatchGuard Firebox allows unauthenticated remote root access via SSH on port 4118 using default credentials (admin:readwrite). Patch immediately.

GE Vernova patched a Critical Auth Bypass flaw (CVE-2025-3222) in Smallworld Master File Server. The flaw could allow users with system knowledge to circumvent authentication. Update immediately.

North Korea's KONNI APT is exploiting stolen Google accounts and the Find Hub service to remotely wipe South Korean Android devices for data destruction and surveillance, then spreading malware via KakaoTalk.

A Critical (CVSS 9.3) RCE flaw (CVE-2025-64486) in Calibre allows arbitrary code execution when a user views or converts a malicious FB2 e-book due to unsafe filename handling. Update to v8.14.0.