ASEC uncovers sophisticated attacks targeting South Korean Windows IIS and Linux systems, deploying WogRAT, MeshAgent, and SuperShell for cyber-espionage and lateral movement.

Meta is reportedly in talks to acquire PlayAI, a voice-generation AI startup, to strengthen its AI voice tech and multimodal capabilities, following its Scale AI investment and superintelligence push.

Apple has launched the Swift on Android Workgroup to bring formal Swift support to Android, aiming for seamless cross-platform app development and enhanced tooling.

A new Snake Keylogger campaign exploits an undocumented DLL sideloading technique via jsadebugd.exe to target energy and logistics sectors with fake oil deals.

Google unveils Gemma 3n, a groundbreaking open-source, on-device multimodal AI model. It brings high-end performance to mobile devices via MatFormer architecture and memory optimizations.

Unlock the Secrets to Finding and Fixing This Critical Vulnerability

How to Detect, and Exploit Using Logger++, Burp, and Scripting

Silence the 404s and Unearth Hidden Paths with Smarter Wordlist Strategy

A Deep Dive into Exploiting and Reporting a $1,160 Bounty-Winning IDOR Vulnerability in GitLab’s Machine Learning Model Registry

Unique and super helpful tools in your OSINT journey

Task 2 — Writing IDS Rules (HTTP)

Windows 11 25H2 Dev Build introduces deeper password manager integration, starting with 1Password, allowing Windows Security to use and save passkeys via Windows Hello.

Android 16 introduces new "Mobile Network Security" features, including network alerts and 2G protection, to detect and counter Stingray devices, requiring IRadio HAL 3.0 modem support.

Nicholas Michael Kloster pleaded guilty to hacking organizations to promote his cybersecurity services, facing up to 5 years in prison for his illegal "self-promotion" tactics.

Rapid7 warns of a critical flaw (CVE-2024-51978, CVSS 9.8) in 689 Brother and other printer models that allows remote admin password deduction from serial numbers, unfixable by firmware on existing units.

ClickFix attacks surged 517% in a year, tricking users into executing malicious code. A new "FileFix" tactic exploits Windows File Explorer for stealthy malware delivery.

Microsoft's active Windows device count has reportedly dropped by 400 million in three years, from 1.4 billion (2022) to just over 1 billion, signaling a shrinking user base.

Canada has ordered Hikvision to shut down nationwide, citing national security concerns. The ban prohibits government use of its products, but Hikvision calls it baseless and biased.

A six-day RansomHub attack exploited RDP, used Atera/Splashtop RMM, Mimikatz, and Rclone to breach an enterprise, exfiltrate data, and deploy ransomware.

Mark Gurman hints Apple's next wearable could be the "Apple Ring," a subtle smart ring for health tracking, gestures, and longer battery life, complementing the Apple Watch.