Twelve doors. One hidden room. How a single MD5 hash revealed everything the developer never wanted you to find.

It only took a few months and AI models for a few to ruin it for everyone

Overview

Someone is using a poem on GitHub to coordinate a cryptomining botnet called PoeLLM, according to Lumen’s Black Lotus Labs. Gamers, if you…

A fake open relay in under 300 lines of Kotlin, built with Spring Boot and Apache James. It accepts every message, delivers none, and logs…

Attackers do not improvise, they follow predictable stages, and that predictability is a defender’s biggest advantage

The Contents of the Room: 1. Room outline 2. Threat Intelligence 3. UrlScan.io 4. Abuse.ch 5. PhishTool 6. Cisco Talos Intelligence 7…

Task 1:

Overview

LinPEAS

A ransomware crew just accused a US dental group of HIPAA non-compliance on its leak site, and HHS has now brought 14 enforcement actions…

Understanding PowerShell execution, Windows forensic artifacts, event logs, process trees, Script Block Logging, and how SOC analysts…

The FBI and DOJ seized domains and disrupted scanning and spear-phishing tools used by Flax Typhoon, a China-linked threat group tied to Integrity Technology Group.

The Growth of AI Crime Markets and the Challenge for Banking Security Signs that artificial intelligence tools may have been used in the recent attacks on Korean banks have attracted considerable …

Cyber threats never sleep—which is why your protection shouldn't either.

The story of a tiny “+” that broke the gate — and what it taught me about identity, rate limits, and responsible disclosure.

TL;DR On October 7, security researchers detected active cyberattacks targeting the AhsayCBS backup platform. Threat actors chain two critical AhsayCBS vulnerabilities to achieve remote code execu…

TL;DR Security researchers publicly disclosed a high-severity vulnerability in the Telegram Desktop application. This Telegram Desktop account takeover flaw enables remote attackers to steal sessi…

TL;DR HPE has patched two critical flaws in its server and network management tools. The first is an HPE iLO 7 vulnerability, CVE-2026-79820 (CVSS 9.0), which could give a remote attacker administ…