A notorious Android spyware family has resurfaced with dangerous new capabilities, evolving from a simple data thief into a sophisticated surveillance tool that can actively fight off attempts to …

A unique Android banking trojan, FvncBot, targets mBank (Poland) customers. It uses HVNC and H.264 to stream screens and performs web-inject attacks via FCM/WebSocket C2.

The JS#SMUGGLER campaign uses "Junk Code" JavaScript and fileless PowerShell executed via mshta.exe to bypass EDR. This multi-stage attack silently installs the NetSupport RAT.

A new C-compiled RAT, CastleRAT, uses Steam Community pages to hide its C2. The malware deploys advanced features like UAC Bypass, screen capture, and clipboard hijacking for espionage.

Despite takedown, LockBit 5.0 resurges as a cross-platform threat. The new variant blinds Windows Event Tracing (ETW), uses Invisible Mode for stealth encryption, and overwrites free disk space.

Responding to user complaints, Windows 11 Build 26220 adds a setting to disable AI actions in the File Explorer context menu, reducing significant UI clutter.

The Exact Recon → Bug → Report Flow That Still Pays in 2025

Guía completa sobre la vulnerabilidad API8:2023 (Security Misconfiguration): Ejemplos, metodología de detección y mitigación esencial.

Hi Vipul from The Hacker’s Log here 👋 Today we’re diving into one of the most powerful bug bounty techniques that still works beautifully

There is a point in your life as an operator, builder, or diagnostician where you stop “looking at a place” and start “reading it.” The…

These will be helpful in your journey

The Iranian threat group MuddyWater has intensified its cyber-espionage operations with the deployment of a new malicious program

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), in its newly issued mobile communications guidelines, has delivered a

Portugal has expanded its legal framework in the realm of digital security, formally establishing protections for good-faith specialists

The new release of Tiny Core Linux illustrates just how far the philosophy of minimalism can be taken

Hackers siphoned more than 100 billion tokens from Upbit in just 54 minutes, exploiting a flaw in Solana

Sauron is a fast AD tool for post-exploitation. It provides instant context on new credentials, resolving nested groups, OUs, GPO inheritance, and account metadata via LDAP.

Google has unveiled a new architecture for processing long sequences, Titans, along with a theoretical framework, MIRAS, which