Google is suing the operators of BadBox 2.0, one of the world's largest smart TV botnets, to combat digital fraud and protect over 10 million infected Android devices.

Grafana Labs issued urgent patches for high-severity XSS (CVE-2025-6023) and medium-severity open redirect (CVE-2025-6197) vulnerabilities, impacting its observability platform.

Cisco Talos uncovers a sophisticated MaaS operation leveraging public GitHub repos and the Emmenhtal loader to distribute Amadey, SmokeLoader, and AsyncRAT, often via phishing.

Ubiquiti warns of CVE-2025-27212, a critical (CVSS 9.8) command injection vulnerability in UniFi Access devices, enabling unauthenticated RCE on the management network.

Kaspersky Labs reveals GhostContainer, a sophisticated backdoor targeting Microsoft Exchange infrastructure in Asia's government and high-tech sectors, using advanced evasion tactics.

A critical RCE (CVE-2025-34300, CVSS 10.0) in Lighthouse Studio's Perl CGI scripts allows unauthenticated attackers to execute arbitrary code on web servers hosting surveys.

Lookout Threat Lab reveals Massistant, a powerful new mobile forensics app from China's Meiya Pico, used by law enforcement to extract vast user data from seized phones.

Jamf Threat Labs has uncovered a sophisticated new macOS infostealer variant that managed to bypass Apple’s security defenses by leveraging valid code signing and notarization

📌Free Article Link.

What started as a path traversal led to XSS, SSRF, and full account compromise.

Free Link 🎈

We’ve all been there — staring at what seems like a dead-end vulnerability, wondering if it’s even worth reporting. I almost made that…

Early in my bug hunting journey, I made a rookie mistake —

A low-impact but unexpected behavior in Tumblr’s Post+ system allowed subscriptions to creators who had already opted out — here’s how I…

🧠 Quick Summary

The Illusion of “Delete”

Hey there!😁

It was one of those calm evenings where the rain tapped gently against the window, setting the perfect backdrop for deep focus. I had some work to finish, so I let one of my background scripts run…

During a recent pentest of a coworking space management application, our team had a really productive start. We quickly found some serious…

Hello 👋 I’m xabit a part-time bug bounty hunter 🎯 and a first-year college student 📚. Bug bounty hunting isn’t just about earning money…