Hi everyone, Horbio this side, and welcome back to another cybersecurity video.

The problem you already have

The Revolut data-leak saga has proven considerably wider than the initial account. A hacker under the pseudonym IAmNotAVillain claims that the attackers maintained access to the systems of several…

Security researchers recently uncovered the Mantax Otax Android malware. This dangerous Indonesian mobile ransomware integrates deep espionage capabilities with aggressive file encryption. At a gl…

Security researchers at Silent Push identified a fraudulent job recruitment scheme hosted on a Discord server. The campaign aims to insert a suspected North Korean IT worker into Western tech comp…

Google has announced that Google Home will formally support the Model Context Protocol (MCP). This means that the home environment of the future will no longer answer to a single voice assistant a…

Every day, security teams receive files, email attachments, downloads, and applications that may or may not be safe. The difficult part is…

Learn how WSL2 brings Linux to Windows and why bug bounty hunters use it for security tools, scripting, automation, and recon - all without dual booting.

Cybersecurity has traditionally focused on keeping attackers outside the network. Firewalls, authentication systems, endpoint protection…

I have owned this device for a few years, but during a test, it got misconfigured and stuck in a bad state. While trying to follow official…

Sometimes the interesting security findings start with the most boring errors. This week I was debugging a CloudFormation deployment when…

Engineering Air-Gapped Evidence Pipelines - Inside the SPECTRAL Digital Forensics Architecture

Wireshark

Your local sticker shop has finally developed its own webpage. They do not have too much experience regarding web development, so they…

In an era where digital threats are evolving every day, cyber security has become one of the most critical skills for the future.

Security researchers at Group-IB recently published an investigation into a Smishing Triad phishing kit deployed across global fraud campaigns. The criminal operation sends fraudulent text message…

How a simple photo order exposed broken access control and personal data on a race photography platform.

While testing a large e-commerce application, I found an interesting combination of weaknesses that turned an address-saving endpoint into…

Online shopping is convenient — until it isn’t. One wrong click, a reused password, or a fake “order confirmation” email can turn a simple…

1. Initial Access