Join the AI Security community on Twitter and LinkedIn group for additional updates.

Every time you click ‘Sign in with Google’ or ‘Continue with Microsoft,’ you’re relying on OAuth, the industry-standard protocol that lets…

Introduction

A Linux web server hosting a cloud gateway application where a root-owned script is aggressively and repeatedly parsing application logs…

http at port 80

The DOJ has won a landmark antitrust case against Google. A U.S. court has prohibited exclusive deals and ordered Google to share data to promote competition.

Google's new Android update patches dozens of flaws, including two actively exploited vulnerabilities and a critical RCE that can be triggered without user interaction.

CISA warns of a critical flaw (CVE-2025-9696) in SunPower PVS6 solar inverters. Hardcoded Bluetooth encryption parameters allow attackers to gain full control.

CISA adds two flaws to its KEV Catalog: a TP-Link factory reset flaw and a WhatsApp zero-click vulnerability used in targeted spyware attacks. Patching is urgent.

A new report reveals Inf0s3c Stealer, a stealthy Python malware that abuses Discord to exfiltrate passwords, crypto wallets, and other sensitive data from victims.

A new report from Sekoia.io reveals how the global commercial spyware industry is thriving despite sanctions, selling sophisticated zero-click surveillance tools to governments.

“Can you hack your way to a $5.50 flight to New York?” That’s what I set out to explore — armed with a proxy, curiosity, and way too much…

Learn how to use Sublist3r. Discover hidden assets, integrate the tool into your workflow, and improve your Bug Bounty skills.

Imagine if you could peek into the books of India’s biggest companies — before quarterly earnings were announced. By simply looking at…

Every system has secrets. Some scream, others whisper. PowerShell chooses the whisper — and that’s what makes it lethal.

Since Telegram and WhatsApp have been deemed unsafe due to snooping and sharing data with law enforcement, black hat groups are…

AI video tools like Pika AI are game-changing, but if you’re on the free or Basic plan, you’ve probably run into the same frustrations: long queues, warped characters, ignored prompts, and features…

Introdução

How a Simple Copy-Paste on Hacked WordPress Sites Can Empty Your Accounts

Introdução