Devolutions patched two flaws in Devolutions Server: A Critical (CVSS 9.4) Auth Bypass allows user impersonation via pre-MFA cookie replay, and another flaw leaks plaintext passwords to view-only users.

A Critical (CVSS 9.8) flaw (CVE-2025-59396) in WatchGuard Firebox allows unauthenticated remote root access via SSH on port 4118 using default credentials (admin:readwrite). Patch immediately.

GE Vernova patched a Critical Auth Bypass flaw (CVE-2025-3222) in Smallworld Master File Server. The flaw could allow users with system knowledge to circumvent authentication. Update immediately.

North Korea's KONNI APT is exploiting stolen Google accounts and the Find Hub service to remotely wipe South Korean Android devices for data destruction and surveillance, then spreading malware via KakaoTalk.

A Critical (CVSS 9.3) RCE flaw (CVE-2025-64486) in Calibre allows arbitrary code execution when a user views or converts a malicious FB2 e-book due to unsafe filename handling. Update to v8.14.0.

ENKI exposed a Lazarus Group espionage campaign targeting aerospace/defense firms. The new Comebacker variant uses malicious Word macros and ChaCha20/AES to deliver a memory-resident backdoor.

The Acronis Threat Research Unit (TRU) has identified a new DragonForce ransomware variant that showcases a dramatic evolution in both technical sophistication and organizational structure. The up…

Guía completa sobre vulnerabilidades en APIs GraphQL: descubrimiento de endpoints, fallas de IDOR, ataques de introspección, DoS y…

The notification came on July 7, 2024. Jinfeng Luo, a software engineer who had spent over a decade developing electronic design…

Nmap gives us a basic lay of the land

A cyberattack reduces the U.K.’s GDP and Google finds malware using AI to self-modify

Here’s another reverse engineering challenge from this year’s Huntress CTF.

Author: Berend Watchus November 11, 2025 Blog article

In today’s digital world, cybersecurity isn’t just a concern for IT professionals — it’s a shared responsibility for everyone who uses…

The Mirage of “Free”

https://cyberdefenders.org/blueteam-ctf-challenges/achievements/zque/packetmaze/

1️⃣ Scenario Overview

Philips şirketince 1974 yılında geliştirilmiş olan CD’ler, Ses sinyallerini sayısal ve optik birimlerce okunabilecek biçimde küçük bir disk…

We trust ChatGPT with everything — from personal brainstorming to professional secrets. But what if someone could trick it into spilling…

SigmaOptimizer is an E2E PowerShell tool that uses LLMs to automatically create, test, and optimize Sigma rules based on real-world security logs.

APT-C-60 targets HR staff with fake resumes attached as VHDX files. The new SpyGlace malware variants use Git, COM hijacking, and GitHub for control.