How Crypto Scams and Ponzi Schemes Work??

This analysis was conducted by me as a Cyber Threat Intelligence Analyst and Threat Researcher at a Brazilian cybersecurity company between…

1. Beyond Software Boundaries: The Invisible Leakage

Understanding File Manipulation and Log Analysis in Linux

Remember the guy that had a red wagon filled with cell phones and walked around changing traffic patterns? It happened well before 2020.

We will create a case to investigate it further why this allert was created.

Introduction

Table of Co

There’s this constant debate in cybersecurity of if should you go to college, or just stack up certs and learn on your own?

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Dell patched a Critical (CVSS 9.1) flaw (CVE-2025-46608) in Dell Data Lakehouse that allows a high-privileged remote attacker to escalate privileges and gain unauthorized administrative control. Update to v1.6.0.0.

Singapore, Singapore, 13th November 2025, CyberNewsWire

Google launched Private AI Compute, a new platform that combines Gemini's cloud power with hardware-protected security (TIE) to offer advanced on-device AI for Pixel 10 while guaranteeing data privacy.

Elastic patched two Kibana flaws: CVE-2025-59840 XSS via Vega visualizations and CVE-2025-37734 (SSRF) via the Observability AI Assistant. Update to v9.2.1 immediately.

A Critical flaw (CVE-2025-11919) in Wolfram Cloud allows RCE and privilege escalation. Attackers exploit a race condition in the shared /tmp/ directory to inject code into other tenants' JVMs.

ASEC exposed a SteamCleaner malware clone signed with a valid certificate. It installs a Node.js RCE backdoor via InnoSetup, evades sandboxes, and is suspected of running Proxyware for profit.

A XSS flaw in Open WebUI allows authenticated users to achieve Admin RCE by injecting JavaScript into rich text prompts, then exploiting the Functions feature. Update to v0.6.35.

A new campaign is using Bitcoin wallet lures to distribute DarkComet RAT. The UPX-packed trojan gains persistence via a fake explorer.exe binary and uses keylogging and remote control to steal data.

A Critical flaw in Lite XL (CVE-2025-12120) allows RCE when opening a project: the editor automatically executes malicious .lite_project.lua files, risking developer compromise.

But damned if I’m going to pay to migrate apps and more

AI Red Teaming is an evolving field focused on evaluating AI systems’ security by simulating attacks and identifying vulnerabilities.