At a Glance Actor or Group: Suspected state-sponsored groups (UNC6508, BASIN CASTLE) and cyber criminals (UNC6780). Activity Type: Open source supply chain compromise, AI credential harvesting, an…

At a Glance Security researchers at Gen Threat Labs discovered a critical remote code execution flaw in Sogou Input Method. This software serves as one of the most widely used typing tools in Chin…

TL;DR Walkthrough of the TryHackMe Metasploit Payload Generation room.

While its formidable rival Anthropic reportedly collaborates with NVIDIA to orchestrate a colossal Initial Public Offering valued at an astounding two trillion dollars, generative artificial intel…

Last week, Microsoft released its routine September 2026 updates for every supported product. Among them, the Windows 11 24H2/25H2 update KB5124008 has, once installed, provoked several functional…

TL;DR A critical static code injection flaw allows unauthenticated remote attackers to execute arbitrary commands on N-central servers. The vulnerability has seen active exploitation in the wild a…

TL;DR The Apache Software Foundation addressed seventeen distinct vulnerabilities impacting Apache Storm version 3.0.0. These flaws enable authenticated users to escalate privileges to root, execu…

30-Second Version: Pwn2Own Automotive 2026’s most expensive single vulnerability wasn’t in the Tesla. It was an out-of-bounds write in a DC…

This is how, I got root in Agent Sudo.

A spoiler free phishing investigation using email headers attachment analysis Unicode deobfuscation and threat intelligence

When we use a website, mobile application, or any other online service, there is usually a communication process happening in the…

How the fight against rogue AI is being hijacked to rebuild the mid-century telecom monopoly.

The well-known enthusiast BobPony recently uncovered a new way to circumvent account sign-in on Windows 11 Home. The method proves remarkably simple yet effective. Thereafter, when users installin…

Zup folks, it’s me.

You paid for a penetration test. The report arrived as a PDF. You opened it, looked at the coloured summary chart, saw two mediums and a…

Introduction

Hello Guys! this write up will tells about one of easy-level room in TryHackMe platform. The write-up will focused on solving quizzes, so…

While practicing Windows Event Logs on TryHackMe, I came across an interesting issue: the room appears to be quite old and some of its…

How a seemingly harmless test endpoint exposed backend integration details and why test routes should never be treated as harmless.

Picture two identical tweets. Same text, same account, posted at the same time on different days. One has 3 retweets. The other has 340…