Introduction

To achieve the complete subjugation of a Cisco mail gateway, an attacker now requires only a single, meticulously crafted email. The critical vulnerability designated as CVE-2026-76461 is actively…

At a glance Malware family: Vwork and Gigabud Threat actor: GoldFactory (confirmed attribution) Targets or victims: Mobile banking users across 11 countries Delivery vector: Social engineering via…

At a glance Malware family: Casbaneiro Threat actor: Unknown Latin American cybercriminal group (suspected attribution) Targets or victims: Banking customers across Argentina, Peru, Colombia, and …

Why reporting a security flaw should not mean staying silent forever

A Little About This Blog

What external domain was contacted during script execution? pcap command

Introduction

A HackTheBox walkthrough from a single HTTP banner to full root shell, with a forged JWT, one password spray, and a kernel exploit.

This was my very first on-site CTF experience, hosted on our university campus. I competed as a team member of Pwned Wizards, and our team…

ARP Spoofing / Layer 2 Traffic Analysis

TBFC’s drone scheduler web UI is getting strange, long HTTP requests containing Base64 chunks. Splunk raises an alert: “Apache spawned an…

Microsoft previously confirmed that the September 2026 update for Excel crippled formula dragging and copy-paste functions. Engineers have not yet resolved this underlying issue. Now, the tech gia…

OpenAI has officially announced the commencement of the second round of its Codex for Open Source sponsorship program. The company has brilliantly doubled the available slots from 5,000 to 10,000.…

Security researchers discovered severe industrial firmware vulnerabilities across multiple automation vendors. Three distinct companies released coordinated security advisories detailing critical …

TL;DR The Shadowserver Foundation detected active in-the-wild exploitation of an Issabel PBX vulnerability on September 9, 2026. Attackers are targeting telephony appliances to execute arbitrary o…

TL;DR Octopus Deploy addressed two high-severity Octopus Server vulnerabilities in its continuous delivery platform. These defects permit remote code execution and unauthorized script deployment. …

At a glance Malware family: SloppyRAT Threat actor: Suspected ransomware operators Targets or victims: Windows endpoints Delivery vector: Social engineering via ClickFix prompts Key capabilities: …