A new report reveals the TAOTH cyber-espionage campaign, which hijacks software updates and uses spear-phishing to deliver malware to high-value targets in Asia.

SikkahBot, a new Android malware, is impersonating scholarship apps to steal financial data and automate transactions from students in Bangladesh.

A loophole in the VS Code Marketplace allows attackers to reuse names of removed extensions to spread malware, a flaw that creates a new supply chain attack vector.

A new report reveals the Silver Fox APT group is abusing a Microsoft-signed vulnerable driver to disable endpoint security and deploy the ValleyRAT backdoor.

A critical RCE flaw (CVE-2024-13986) in Nagios XI allows an authenticated attacker to upload and execute a malicious PHP shell, taking control of the server.

Ransomware has evolved.  In the early days, attackers focused on encrypting files on endpoints. Then, they moved to corporate networks…

TL;DR: Anthropic says it caught real criminals trying to use its AI, Claude, to polish phishing, fix/obfuscate code, and slip past…

Author: SafeLine Pro user — YaneonY

When using Nextcloud, some backup processes may encounter issues where certain program files are blocked by the WAF. This can interfere…

Introduction: The Coming Drone World

At some point in every cybersecurity journey, you reach a stage where you want to formalize your skills with a certification. For me, that…

Cyber warfare rarely stands still. Each campaign brings subtle evolutions, and every evolution signals how threat actors are refining their…

The Illusion of Choice

According to nmap.org, Nmap sends raw IP packets to figure out:

In today’s cybersecurity landscape, one credential stands tall as the gold standard for professionals aiming to establish credibility…

> About Author Hi, I’m Sharon, a product manager at Chaitin Tech. We build SafeLine, an open-source Web Application Firewall built for…

Over the past few weeks, I’ve been working on a project that I’m really excited to share: a lightweight Endpoint Detection & Response (EDR)…

Web #1:
The first web application is vulnerable to Cross-Site Scripting (XSS) via the loan comment field, where malicious input such as…

Klavye başındaki tüm güvenlik meraklılarına selamlar. Bugün aslında hepimizin bildiği, bazen çok önemsemediğimiz ama aslında çok kritik…

Uncover Hidden Flaws: A Powerful Wordlist for Bug Bounty Success