eSentire uncovered a sophisticated attack on a US accounting firm, deploying PureRAT via the new Ghost Crypt crypter and a stealthy "Process Hypnosis" injection technique.

Apache Jena versions up to 5.4.0 are vulnerable (CVE-2025-49656, -50151), allowing admin users to compromise the server file system and manipulate configurations.

Kaspersky uncovers a sophisticated APT41 cyberespionage campaign targeting African government IT, showcasing the Chinese group's full TTPs, including Impacket and Cobalt Strike.

LARVA-208 is targeting Web3 developers with fake AI platforms (like Norlax AI) and job lures to deploy Fickle Stealer malware, aiming to steal crypto and sensitive data.

Descubre cómo las Security Misconfiguration exponen sistemas y datos. ¡Explota y protege con esta guía!

The One JavaScript Trick That Exposed 127 Vulnerabilities Instantly

This article was originally published on Oct 28, 2021, writted by Ted Udelson

One of India’s largest crypto exchanges, CoinDCX, has suffered a serious security breach. Over 44 million dollars in crypto assets were…

Challenge Overview

بسم الله الرحمن الرحيم
والصلاة والسلام على نبينا المجاهد الشهيد

By Md Shafiqul Baten Sumon

In the ever-evolving world of cybersecurity, a new form of attack is gaining momentum — one that doesn’t directly target the victim but…

Penetration testing is equal parts art and science, requiring a mix of creativity, technical know-how, and the right tools to uncover…

What you need to know before you set up your hacking labs

The tech I built my hacking lab on

Recon with nmap

Operating System (OS), Kernel, User land, Kernel Land and more.

I received a suspicious email with a very weird-looking attachment. It keeps on asking me to “Enable Macros.” What are those? I was…

EncryptHub is targeting Web3 developers with fake AI platforms (like Norlax AI) to deploy Fickle Stealer, aiming to steal crypto wallets and sensitive project data.

Cybercriminals from PoisonSeed are bypassing FIDO2 protection by tricking users into approving cross-device login requests via legitimate QR codes, exploiting a convenient feature.