This blog is actually a video that explains how it is possible to locate Google and Apple smartphones legally by misusing device unique Advertising ID and stream of data collected by advertising plugins. These plugins are part of thousands of popular and…

Running Kali Linux on a Raspberry Pi Zero is a fantastic way to create a portable, powerful testing device. This guide will walk you through setting up Kali Linux Pi-Tail on a headless Raspberry Pi Zero 2 W that is powered and controlled from a smartphone…

WiFiPumpkin3 is a powerful framework designed for rogue access point attacks and network security testing. It allows security researchers, and red teamers to create fake Wi-Fi networks, custom captive portals, intercept traffic, and deploy phishing attacks.…

In previous series of blogs I focused on installation of Kali NetHunter on older model of TicWatch Pro 2018 (catfish) which might be for some of you a good choice if you already have them forgotten in your drawer or you can get them cheap to play around.…

Learn about the critical security vulnerability in iTerm2 and how it could have exposed sensitive user data. Stay informed and protect yourself.

Discover SysBumps, the first successful KASLR break attack targeting macOS systems on Apple Silicon processors. Find out how vulnerabilities in speculative execution can compromise kernel memory.

Discover the risks posed by the npm Supply Chain Attack on Ethereum developers. Find out how attackers targeted the Nomic Foundation's trusted tool, Hardhat.

Discover the flaw in Windows BitLocker that allows attackers to bypass encryption and access sensitive data. No screwdrivers or hardware hacking required.

Uncover the details of a sophisticated Chrome extension threat campaign: how phishing, credential theft, and malicious code impacted developers and end users.

ASUS has issued a security advisory warning users of critical vulnerabilities affecting several router models. Two flaws, tracked as CVE-2024-12912 and CVE-2024-13062, could allow attackers to exe…

Enhance security in the Python ecosystem with Project Quarantine. Learn how PyPI's new feature mitigates risks from malicious packages.

Uncovering the truth about GitHub's star-rating system: a study reveals widespread fraudulent stars manipulating repository popularity.

Discover the future of satellite internet with Starlink's V3 satellites. Increase bandwidth, improve speeds, and expand your online possibilities.

SafeBreach also released a PoC tool that tests a vulnerable Windows Server against CVE-2024-49112, available on their GitHub repository.

Stay informed about the critical vulnerabilities in WhatsUp Gold network monitoring software. CVE-2024-12108 allows complete server control through the public API.

Learn about the evolution of LegionLoader, a sophisticated downloader malware with a wide range of capabilities, including capturing screenshots and stealing information.

Discover the new technique called Bad Likert Judge that can bypass the safety measures of Large Language Models (LLMs) and generate harmful content.

D-Link issues critical advisory for End-of-Life routers. Learn about the vulnerabilities exploited by botnets and the need for replacement.

Learn about the proof-of-concept (PoC) exploit for CVE-2024-21182 in Oracle WebLogic Server. Understand the risks and take action to secure your server.