Introduction

Something interesting happened in the Tomcat ecosystem on October 27, 2025 that hasn’t ever happened before.

Tips, Tools & Techniques used by Hackers, Scammers, & Coworkers to Track & Exploit Files, Links, & More… yet, How to Avoid Falling for…

Hello guys, this is Mousa AKA 0xDolphin. I took part with my amazing team Ast3roids in CyCTF 2025 — hosted by the amazing CyShield…

محاولة لطيفة باللغة العربية - إنتاجي الأول!

When I started learning about cloud computing, one principle stood out to me, the Principle of Least Privilege.  It simply means: give…

GZR Observer — Global Daily — India Perspective Nov 10, 2025 Russia Dismantles Pakistan’s Intelligence Spy Ring Targeting Air Defence Technology United States Domestic Politics And …

The maintainers of SuiteCRM, the popular open-source customer relationship management (CRM) platform, have released an urgent security update addressing two significant SQL injection vulnerabiliti…

Australia imposed sanctions and travel bans on four entities and one individual for engaging in cybercrime to fund North Korea's WMD and missile programs. The regime stole $1.9B in crypto in 2024.

CRIL exposed fileless phishing using malicious HTML attachments. Credentials are stolen via a fake Adobe login and instantly exfiltrated to Telegram bots, bypassing traditional domain filters.

Devolutions patched two flaws in Devolutions Server: A Critical (CVSS 9.4) Auth Bypass allows user impersonation via pre-MFA cookie replay, and another flaw leaks plaintext passwords to view-only users.

A Critical (CVSS 9.8) flaw (CVE-2025-59396) in WatchGuard Firebox allows unauthenticated remote root access via SSH on port 4118 using default credentials (admin:readwrite). Patch immediately.

GE Vernova patched a Critical Auth Bypass flaw (CVE-2025-3222) in Smallworld Master File Server. The flaw could allow users with system knowledge to circumvent authentication. Update immediately.

North Korea's KONNI APT is exploiting stolen Google accounts and the Find Hub service to remotely wipe South Korean Android devices for data destruction and surveillance, then spreading malware via KakaoTalk.

A Critical (CVSS 9.3) RCE flaw (CVE-2025-64486) in Calibre allows arbitrary code execution when a user views or converts a malicious FB2 e-book due to unsafe filename handling. Update to v8.14.0.

ENKI exposed a Lazarus Group espionage campaign targeting aerospace/defense firms. The new Comebacker variant uses malicious Word macros and ChaCha20/AES to deliver a memory-resident backdoor.

The Acronis Threat Research Unit (TRU) has identified a new DragonForce ransomware variant that showcases a dramatic evolution in both technical sophistication and organizational structure. The up…

Guía completa sobre vulnerabilidades en APIs GraphQL: descubrimiento de endpoints, fallas de IDOR, ataques de introspección, DoS y…

The notification came on July 7, 2024. Jinfeng Luo, a software engineer who had spent over a decade developing electronic design…

Nmap gives us a basic lay of the land

A cyberattack reduces the U.K.’s GDP and Google finds malware using AI to self-modify