A massive leak exposes Iran's Department 40 (APT35). Discover how IRGC hackers build target packages for assassination squads and drone strikes.

CVE-2025-66035: Angular protocol-relative URLs leak XSRF tokens, bypassing CSRF protection. Update to v19.2.16, v20.3.14, or v21.0.1 now.

The application is a Flask-based e-commerce platform running inside a Docker container. The attack chain combines a JWT role forgery…

Your first stop in ethical hacking.

During my OSCP labs and internal network simulations, I struggled with traditional pivoting tools like SSH tunneling and Chisel — either…

DCSync is one of those attacks that sounds more complicated than it actually is. Here’s the concept: if an attacker has an account with the…

You don’t need equipment to setup a homelab. I’ve got a desktop with 32GB of memory and 1TB of storage (it’s a OptiPlex 5070 + 2 monitors)…

A newly identified path traversal vulnerability in Fortinet FortiWeb allows attackers to bypass authentication and ultimately gain…

The Swiss Army Knife of Every Developer

In Part 2A, I discovered that only 33% of reconnaissance commands triggered SIEM alerts. Here’s how I found that gap: by using correlation…

An advanced reconnaissance tool designed to silently prepare infected hosts for long-term compromise.

By: Travis Ray Caverhill aka Saltine Hacker

A practical playbook to ship FastAPI services that stay secure, polite to your neighbors, and deploy without waking the on-call.

Discover how to access and benefit from the latest X reward program.

Everything you need to know to understand and access Wrapped SOL rewards.

Apache SkyWalking patches a Stored XSS flaw (CVE-2025-54057) affecting versions 10.2.0 and older. Upgrade to v10.3.0 to secure your APM dashboards.

The malicious 'Crypto Copilot' Chrome extension drains Solana funds from traders on X by injecting hidden transfers. Remove this malware immediately.

Hello Security Researchers & Bug Bounty Community,

Photo by Kevin Ku on Unsplash

Snyk empowers organizations to build fast and stay secure. As security and engineering teams scale their use of Snyk across the enterprise, understanding what’s happening across your group and …

This curated set from November 2025 tracks the offensive edge of AI security, from sabotage-resistant evaluation and evolving jailbreak…