Intrusion Detection System (IDS) is built to secure the network by detecting vulnerabilities targeting applications and computers. IDS…

Halo Bro dan Sis sekalian, para pejuang keamanan siber atau yang baru nyemplung di dunia per-hacking-an! 👋 Pernah kepikiran nggak sih…

The Story

An introduction to Security Information and Event Management.

Storyline💡

The Story👉

Dynamic Analysis | Part 3

CRADLE is a new open-source web application for CTI analysts, offering collaborative note-taking, visual mapping, and report generation.

These are a collection of security and monitoring scripts you can use to monitor your Linux installation for security-related events or for an investigation

A stealthy campaign is persistently hacking ASUS routers via undocumented bypasses and CVE-2023-39780, building a backdoor network without malware.

Java applications face a critical risk! A flaw in Apache Commons BeanUtils (CVSS 8.8) can lead to arbitrary code execution. Update immediately.

Zanubis, a sophisticated Android malware, exploits Accessibility Services to steal banking data, intercept 2FA codes, and lock devices.

Threat actor UTG-Q-015 is escalating operations, using 0-days and watering hole attacks against government, finance, and AI in Asia.

A malware campaign is hijacking WordPress sites with fake Java update pop-ups, tricking visitors into downloading malicious executables.

A new campaign by UNC6032 uses fake AI video generator sites and social media ads to distribute a malware cocktail including STARKVEIL.

New campaigns by Silent Werewolf leverage custom C# loaders and advanced delivery to target entities in Russia and Moldova for cyber-espionage.

CHOICEJACKING, a new USB attack, bypasses existing JuiceJacking mitigations on Android and iOS by simulating user input via malicious chargers.

Attackers compromised an MSP's RMM tool (SimpleHelp) to deploy DragonForce ransomware across customer environments.

Katz Stealer, a new MaaS infostealer, targets browsers, crypto wallets, and Discord using advanced evasion and UAC bypass techniques.

The WordPress REST API exposes certain user information through public endpoints. Specifically, the endpoint: This information can aid attackers in further exploitation, such as brute force or…