FortiGuard Labs unveils NailaoLocker, a new ransomware using Chinese SM2 encryption and a built-in, non-functional decryptor, suggesting a prototype or decoy.

wolfSSL 5.8.2 patches four vulnerabilities, including a critical Apple trust store bypass (CVE-2025-7395) and predictable randomness after fork(), impacting secure communications.

JPCERT/CC details a sophisticated, ongoing malware campaign exploiting Ivanti Connect Secure (CVE-2025-0282, -22457) using MDifyLoader, Cobalt Strike, vshell, and Fscan for stealthy persistent access.

AhnLab uncovers SVF Bot, a Python-based DDoS botnet abusing Discord as its C&C channel to target misconfigured Linux servers and launch HTTP/UDP floods.

LAB52 uncovers a sophisticated phishing campaign delivering DeedRAT, a modular backdoor by Chinese APTs, targeting Southeast Asian governments via vulnerable AV software.

eSentire uncovered a sophisticated attack on a US accounting firm, deploying PureRAT via the new Ghost Crypt crypter and a stealthy "Process Hypnosis" injection technique.

Apache Jena versions up to 5.4.0 are vulnerable (CVE-2025-49656, -50151), allowing admin users to compromise the server file system and manipulate configurations.

Kaspersky uncovers a sophisticated APT41 cyberespionage campaign targeting African government IT, showcasing the Chinese group's full TTPs, including Impacket and Cobalt Strike.

LARVA-208 is targeting Web3 developers with fake AI platforms (like Norlax AI) and job lures to deploy Fickle Stealer malware, aiming to steal crypto and sensitive data.

Descubre cómo las Security Misconfiguration exponen sistemas y datos. ¡Explota y protege con esta guía!

The One JavaScript Trick That Exposed 127 Vulnerabilities Instantly

This article was originally published on Oct 28, 2021, writted by Ted Udelson

One of India’s largest crypto exchanges, CoinDCX, has suffered a serious security breach. Over 44 million dollars in crypto assets were…

Challenge Overview

بسم الله الرحمن الرحيم
والصلاة والسلام على نبينا المجاهد الشهيد

By Md Shafiqul Baten Sumon

In the ever-evolving world of cybersecurity, a new form of attack is gaining momentum — one that doesn’t directly target the victim but…

Penetration testing is equal parts art and science, requiring a mix of creativity, technical know-how, and the right tools to uncover…

What you need to know before you set up your hacking labs

The tech I built my hacking lab on