A new report shows that AI agents are successfully discovering and patching complex software bugs in projects like SQLite and FreeRDP that elude traditional methods.

A critical privilege escalation flaw in Capsule Kubernetes (CVE-2025-55205) allows tenant users to bypass security and launch cross-tenant attacks.

Enhancer for YouTube, a popular extension with 600K+ users, is leaving Firefox. The developer cites a "deeply unpleasant" and slow review process.

The U.S. Treasury is exploring a plan to embed digital identity verification directly into DeFi smart contracts to combat money laundering and other illicit finance.

A new phishing campaign in India uses fake government solar subsidy websites to trick victims into downloading a malicious app that steals UPI PINs and other data.

PyPI is now checking for expired domains to prevent "domain resurrection attacks," a major step in securing the Python Package Index from account takeovers.

Learn how server-side template injection (SSTI) in a sandboxed Freemarker environment can be exploited to bypass restrictions and access…

My Introduction

By Dr. Deep Pandey
 Cybersecurity Thought Leader | Global Director — Cyber Security | Mentor to 100,000+ Professionals

Phishing has always been the cockroach of the internet. No matter how many times we think we’ve killed it, it scurries back out from the cracks. The difference now? That cockroach just discovered…

Windows has dominated the desktop market for decades, but 2025 is witnessing something unprecedented — a massive exodus from Windows to…

> About Author Hi, I’m Sharon, a product manager at Chaitin Tech. We build SafeLine, an open-source Web Application Firewall built for…

During the first week of the SMT 2025 Program, I had the opportunity to dive into the world of Web Security through a series of Capture The…

Quantum computing represents a major leap forward beyond classical computers by harnessing the principles of quantum mechanics. Unlike…

Cybersecurity is no longer just a technical challenge — it’s a legal battlefield. In 2025, governments worldwide are tightening…

Walk through any tech conference in 2025 and you’ll struggle to find a vendor booth that doesn’t prominently feature ‘AI-powered’ in their…

Room link: https://tryhackme.com/room/sqlinjectionlm

Monkey365 provides a tool for security consultants to easily conduct Microsoft 365, Azure subscriptions and Azure AD security configuration reviews.

helps you to detect SQL injection Error based by sending multiple requests with 14 payloads and checking for 152 regex patterns for different databases

A new report reveals that the APT-C-36 group is using advanced anti-analysis and anti-virtualization techniques to target government and corporate institutions.