Reflections from Day 2 as a Course Assistant at NYU’s CS4CS Cybersecurity Program

The digital underworld is a constant battleground, with cybercriminals continually refining their weapons. Today, we pull back the curtain…

INTRODUCTION

1. Enumeration

AI is here to stay and Agentic AI is going to be one of the key drivers in this revolution. The potential & power of AI agents is largely…

BinPool is a Python-based dataset of 603 CVEs from vulnerable and patched Debian binaries, enabling advanced vulnerability discovery through ML and static analysis.

McAfee warns of a new Android malware campaign targeting Bangladeshi expats with fake remittance apps like TapTap Send, stealing personal and financial data, including photo IDs.

Cyfirma uncovers "Octalyn Forensic Toolkit," a GitHub-hosted "educational" tool that's actually a modular credential stealer exfiltrating data via Telegram.

GLOBAL GROUP, a rebranded RaaS operation, is aggressively targeting critical infrastructure worldwide, leveraging AI chatbots for automated, high-pressure ransom negotiations.

The Rainbow Hyena threat cluster is unleashing PhantomRemote, a new backdoor, in phishing attacks against Russia's healthcare and IT sectors, leveraging compromised emails.

Master Injections (SQLi, XSS, CMDi): Exploit, Detect, and Protect Your Web Apps & Systems.

Hey hackers 👋 — this post is a fun deep dive into a critical authentication vulnerability I discovered during a recent security test. It combines one of my favorite web bugs (race condition) with a…

Working in a Security Operations Center (SOC) is like being the nerve center of digital defense. It’s not just about responding to alerts —…

This walkthrough covers the exploitation of a vulnerable broadcast receiver in the “IOT Connect” Android application, which allows…

In an age where cloud providers are global, attack surfaces are sprawling, and quantum threats are no longer theoretical, one principle is…

Discover how the FileFix attack uses clipboard hijacking and social engineering to execute hidden PowerShell commands through File…

Beyond Code: How Scammers Target the Human Element and the Tools to Fight Back

The CVE Program is excited to announce updates to the “CVE Program Policy and Procedure for Disputing a CVE Record” aimed at providing…

1. Habilitar-LockdownMode