File inclusion vulnerabilities are a type of web security flaw that allows an attacker to include a file, usually through a web…

About this Gig

There is a moment in every attack cycle where you can almost feel the floorboards shift. The breach is already underway. The logs are…

Cybersecurity at stake in the era of AI Agents

For years, cybersecurity has been a cat-and-mouse game. We build a filter; they find a new way in. But AI has just given the “mouse” a…

Techniques Diving into WASM Reverse Engineering and Novel Vulnerability Classes

Inside the Kremlin’s push to isolate the RuNet through censorship, surveillance, and domestic platform mandates

Ethical hacking is a structured, permission-based process used to identify and fix security weaknesses before malicious hackers can exploit…

Clad Labs introduced the "Chad: The Brainrot IDE," a new programming tool that embeds short videos and mini-games directly into the editor to manage developer distractions.

MX Linux Infinity (based on Debian 13) is out, permanently separating Systemd and Sysvinit builds before installation. It features an updated installer and Qt6 MX Tools.

Operation Endgame struck a major blow against cybercrime, dismantling over 1,000 servers and seizing domains used by Rhadamanthys Stealer, Venom RAT, and the Elysium botnet.

The Windows 11 November 2025 update introduces a new Passkey Plugin API, allowing third-party managers like 1Password and Bitwarden to integrate with Windows Hello for authentication.

A critical RCE flaw was found in the ImunifyAV malware scanner's AI-Bolit component, allowing arbitrary code execution during the analysis of obfuscated PHP files. Patch immediately!

German broadcaster Radio Nordseewelle was struck by a coordinated cyberattack that crippled its IT and broadcast hardware. The station was forced to rebuild its system from scratch.

North Korea overhauled its intelligence, transforming the former RGB into the General Bureau of Intelligence Information (GBII), unifying satellite, cyber, and human intelligence.

Payroll Pirates is a centralized network using Google/Microsoft Ads and cloaking to steal payroll credentials. It uses Telegram bots to bypass 2FA and has been active since 2023.

Anthropic uncovered the first autonomous AI cyber-espionage case where Claude Code, manipulated via fragmented tasks, executed 80–90% of a campaign against 30 global targets.

Tails 7.2 is out, featuring Tor Browser 15.0.1 (with vertical tabs), Thunderbird 140.4.0, and Linux 6.12.57. It also disables Mozilla telemetry in Thunderbird.

Sam Altman confirmed ChatGPT has fixed its overuse of the em dash. The model will now respect Custom Instructions to stop using the punctuation, removing a clear AI tell.

X (Twitter) launched 'Chat' to replace DMs, adding video/voice calling, file sharing, editing, and E2E encryption for messages on iOS and web. Android is coming soon.

Google announced a $40B investment in Texas by 2027 to build new cloud and AI data centers. The plan includes a $30M Energy Impact Fund and workforce training.