SpaceX is planning a record-shattering IPO in 2026/2027 to raise over $30B, targeting a $1.5T valuation. Proceeds will fund Mars ambitions and orbital AI data centers.

China-nexus WARP PANDA APT targets VMware/Azure with BRICKSTORM, a Golang backdoor using DoH for stealth. The group creates "ghost VMs" and conducts session replay attacks for long-term espionage.

A critical unpatched flaw in the TOTOLINK AX1800 router allows unauthenticated HTTP requests to enable Telnet for root RCE. Admins must block WAN access immediately as there is no official fix.

FBI/CISA warn pro-Russia hacktivists (CARR, NoName057) are targeting critical infrastructure with unsophisticated attacks. They exploit unsecured VNC connections to manipulate HMIs and cause physical damage.

CISA warned of a Critical (CVSS 9.4) flaw in D-Link DCS-F5614-L1 cameras. Missing Authentication allows attackers to bypass login, steal admin credentials, and hijack video feeds. Patch immediately.

A Critical RCE (CVSS 10.0) flaw, React2Shell, in React/Next.js's Flight protocol allows unauthenticated system takeover. North Korean and Chinese state actors are actively exploiting the deserialization bug.

Makop ransomware operators now use GuLoader and BYOVD (ThrottleStop.sys) to bypass EDR and security. The "low-effort" campaign targets RDP-exposed networks, with 55% of attacks aimed at India.

DeadLock Ransomware uses BYOVD (Baidu driver exploit) and the EDRGay.exe loader to kill EDR/AV at the kernel level. It uses a custom stream cipher and deletes shadow copies to prevent recovery.

This article is a walkthrough guide to solving the challenges in the Google XSS Game on Appspot.

Despite years of warnings, “123456” and “password” remain among the most common passwords. In an age of billion-record data breaches, weak…

Artificial Intelligence (AI) has revolutionized every industry, and cybersecurity is no exception. In 2025, we are witnessing a digital…

The $800 Parameter: How One Unsanitized Input Revealed a Global Security Gap

CRITICAL FINDING! Massive leaked merchant emails along with client IDs in public PayPal SDK URL. A major PII data leak.

Bus Simulator Vietnam là một tựa game mô phỏng lái xe buýt tại Việt Nam, mang đến trải nghiệm chân thực trên các tuyến đường và địa danh…

Imagine waking up, grabbing your phone, and discovering someone has already rummaged through your camera, microphone, emails, messages —…

Car Parking Multiplayer là một tựa game mô phỏng lái xe và đậu xe theo phong cách thế giới mở, nơi người chơi có thể điều khiển nhiều loại…

The Story

Network Discovery — Scan-ta Clause

Malware Analysis — Egg-xecutable

สวัสดีค่ะ วันนี้เราจะมาแชร์วิธีการหา root flag ในกล่อง Dancing ซึ่งเป็นกล่องใน Starting Point - Tier 0 ของ HackTheBox ค่ะ ถ้าพร้อมแล้ว…