Android ransomware is no longer confined to locking files: Mantax Otax transforms an infected smartphone into a spying instrument and a channel of pressure on its owner at once. Zimperium has desc…

At a glance Malware family: Cyclops Blink Threat actor: Suspected IRON VIKING (Sandworm / Russian nexus) Targets or victims: Multiple compromised Cisco Firewall Management Center (FMC) devices Del…

Die Reihenfolge entscheidet, ob man hinterher weiß, wie sie hereingekommen sind.

What is Metadata?

This challenge falls under the hard category.

Lab five in my Web Security Academy series — the one that actually took effort

Boot2Root CTF Write-up | Linux | Web Enumeration | LFI | Privilege Escalation | Dirty Pipe

The Blaster room is easy and 30 minutes long CTF room about Windows. We are going to use metasploit, nmap as well as dirbuster in this…

Analyzing a two-stage .NET loader that hollows out msbuild.exe, hunts for your Steam JWTs, and ships everything off to Telegram, one…

Financial applications handle some of the most sensitive information users share online, including bank account details, payment…

Started off by looking at the URL parameter?id=MQ==and decoded it, which just gives 1. So the app's passing a plain ID value in there…

Revolut handed strangers copies of passports, verification selfies, and the financial histories of some clients, mistaking fraudulent requests for the official approaches of a government agency. O…

Researchers have discovered a key embedded in the code of the Shinobi video surveillance system, through which an outsider could gain access to the user database and camera settings without a logi…

A website. A few hidden clues. A vulnerable application. One objective: find the attack path.

Attempting to set up my bug bounty foundation Since I discovered a genuine interest in cybersecurity, I’ve been trying to build a nice strong foundation, and this is what I’ve done in the past …

Anthropic pointed its own frontier models at a wide slice of open source software this year and came back with 26,153 candidate…

Passkeys are supposed to make phishing harder. But attackers are now using passkeys themselves as bait to compromise Microsoft 365…

By Daniel Oseghale — Founder LearnCyber Academy | Wazuh Ambassador

Hi everyone 👋.