Two clicks away from total control — HPE’s critical flaw leaves networks wide open.

As the next step in my lab setup, I installed a Kali Linux virtual machine. I selected Kali because it is a widely-used penetration testing…

The quantum era is no longer a distant theory. It is approaching fast, and for blockchain technology, it brings both a threat and a…

After finishing the initial setup, I created the pfSense virtual machine with the following specifications: 512MB of memory, 1 virtual CPU…

Inside the 73-minute attack that destroyed a unicorn startup — and the simple security flaw that could be lurking in your code right now

Podemos comparar um endereço IP ao número da sua casa — é uma forma de identificação. Porém, no contexto de redes, o IP é uma…

The hidden security risks in Python projects and how I fixed them with smart coding practices and libraries.

From electrons to websites on your screen

Dog is a Linux based platform that is rated “easy”. The goal of the machine is to get a user flag and root flag. This machine is great for privilege escalation and post exploitation. I wanted to do…

Cybercriminals are using WAV audio files disguised as voicemail notifications to deliver malware, exploiting trust in corporate brands and bypassing traditional email filters.

Microsoft warns that China-backed APTs (Linen Typhoon, Violet Typhoon, Storm-2603) are actively exploiting critical SharePoint zero-days (CVE-2025-49704, -49706) in unpatched on-premises servers.

CISA, FBI, and HHS issue a joint advisory on Interlock ransomware, active since Sep 2024, targeting businesses and critical infrastructure with double extortion tactics.

Proofpoint reveals a surge in RFQ scams where fraudsters impersonate procurement officials to steal high-value goods by exploiting Net 15/30/45 financing terms.

Google released an urgent Chrome update fixing two high-severity type confusion vulnerabilities (CVE-2025-8010, CVE-2025-8011) in its V8 JavaScript engine. Update immediately!

Weeks after a major takedown, Lumma Stealer has resurfaced with new stealth tactics, exploiting cracked software, fake CAPTCHAs, and GitHub to resume its credential-stealing operations.

A critical unauthenticated SSRF vulnerability (CVE-2025-54122, CVSS 10.0) in Manager.io's accounting software allows bypassing network isolation and exfiltrating sensitive data from cloud environments.

Windows 11 Insiders are testing a new local network migration feature for user files and settings, simplifying PC setup. However, installed applications still require manual reinstallation.

A new report traces China's cyber power to the "Red Hackers" of the 1990s and 2000s, who laid the groundwork for its sophisticated state-backed operations.

The Mimo threat actor has broadened its scope to Magento, employing advanced persistence, fileless execution, cryptojacking, and proxyjacking in a sophisticated new campaign.

NVIDIA announces CUDA support for RISC-V processors, expanding its AI and GPU acceleration technology to a more diverse ecosystem and strengthening its position in emerging markets.