TL;DR The Apache Software Foundation resolved eight Apache MINA SSHD vulnerabilities. These critical security defects include authentication bypasses and server-side memory exhaustion flaws. Admin…

Server-Side Template Injection (SSTI) occurs when user input is concatenated directly into a template string and evaluated on the server…

Did You Really Log Out?

A post in an online developer community caught my eye this week. A full stack developer with six years of experience wants out of the…

To start a career in Cyber Security, you need a combination of technical knowledge, problem-solving ability, and security awareness. You do…

Ethical hacking is the authorized process of testing computers, networks, websites, and applications to find security vulnerabilities and…

Welcome back, hackers 😉!

Summary

Participating in monthly security challenges is a fantastic way to sharpen web hacking skills, test new methodologies, and think outside…

Firefox recently deployed one of its most comprehensive security remediation packages in recent memory. Mozilla successfully mitigated 76 vulnerabilities within Firefox 157. Notably, precisely hal…

Cloudflare has officially declared its intention to autonomously issue publicly trusted certificates for websites, establishing the bedrock for HTTPS functionality across modern browsers. The tech…

On August 31, 2026, attackers broke into a school’s print server and ended up owning its entire Windows domain. eSentire’s Threat Response Unit (TRU) traced the intrusion to a PaperCut…

A fake update component for the Poedit translation app gave attackers a quiet foothold on Windows machines. According to Microsoft Threat Intelligence’s new analysis of NeedyMantis, this tri…

Close call today.

A month of silence from Mahindra, and how CERT-In finally got it fixed ~ By Falgun Sondagar

30-Second Version: Over the past year, bug bounty programs with AI in scope grew 270% — more than 1,121 programs now include an AI feature…