CYFIRMA unveils RenderShock, a zero-click attack strategy exploiting silent OS background processes like file previews and search indexing to execute malware and steal credentials without user interaction.

Unit 42 exposes SLOW#TEMPEST, a new malware variant using advanced CFG obfuscation and indirect function calls to evade static analysis, making it nearly impossible to detect.

CERT/CC warns of critical flaws in Gigabyte UEFI firmware, allowing SMRAM writes and SMM code execution. Patch immediately to prevent firmware implants and Secure Boot bypass.

Axis warns of a critical flaw (CVE-2025-30023, CVSS 9.0) in Camera Station Pro/5 and Device Manager, allowing authenticated RCE via protocol deserialization. Update immediately.

A supply chain attack injected backdoor malware into Gravity Forms plugin downloads from the official website. The backdoor allows RCE and creates admin accounts.

Google exposes a vast phishing campaign hijacking Booking.com reservation chats to steal credit card details from travelers, impacting thousands globally since Nov 2023.

Darktrace uncovers a crypto scam using fake software startups (AI, gaming, Web3 themes) with professional online presences to distribute Electron malware (Windows) and Atomic Stealer (macOS) for crypto theft.

Cybercriminals are once again exploiting the trust users place in popular platforms like GitHub to spread sophisticated malware—this time disguised as free utilities. In its latest threat intellig…

Bug Bounty is a hard way to make money. But neverthless all of us have made this decision already. And fuzzing is the key element for Bug…

A Cadet Corps Case File — Survey Corps Level Threat Hunt

Cybersecurity is a Scam: Unraveling the Subscription Model’s True Colors

https://mattysplo.it/2025/07/14/UCIT.html

Introduction

Why Canada’s Hikvision Ban Signals the Need for Stronger Validation of Surveillance Technology

If you’re starting to rethink letting Gmail read your inbox, chances are you’ve already come across privacy alternatives like ProtonMail…

In an era where cyber threats are becoming more advanced and persistent, organizations need more than just isolated security tools. They…

When the original LEGION penetration testing framework was archived in 2024, the cybersecurity community lost a valuable tool. What started…

Using AI to generate money involves leveraging artificial intelligence to automate tasks, optimize processes, and create new revenue streams. Here are some of the most effective ways to monetize AI…

Follow along in my OSCP journey, this is my target 20 of the TJNULL’s OSCP list.

Spanish police are targeting Google Pixel users running GrapheneOS, a privacy-focused OS, linking it to criminal activity despite its legitimate privacy benefits.