Hello everyone, today we will try to find the flag of DarkSide. Context of the ctf is “Light up the darkness”.

When we think of security, backend systems usually take the spotlight encrypted databases, firewalls, token validation. But in reality, the…

A North Korean cyber group is using "ClickFix" lures and fake job portals to infect marketing and sales job applicants with new malware variants.

Darktrace has uncovered ShadowV2, a new botnet that exploits AWS containers and operates as a "DDoS-for-hire" service with a full user interface.

GitHub is implementing major security changes to npm, including mandatory 2FA and short-lived tokens, after a worm infiltrated hundreds of packages.

The Secret Service has dismantled a massive, covert network near the UN in NYC, capable of disrupting mobile towers and launching devastating cyberattacks.

An Iranian state-sponsored group is using sophisticated phishing and malware to target European defense, telecom, and aviation companies.

Firefox now allows developers to roll back to a previous extension version, offering a quick fix for critical bugs and enhancing user stability.

A large-scale attack on the UXLINK Web3 platform resulted in millions lost and a token value crash—with the hacker himself falling victim to a separate scam.

A new campaign is using fake GitHub repos to trick Mac users into downloading malware disguised as popular apps, including LastPass and Dropbox.

A targeted ransomware attack on a U.S. aviation provider caused widespread flight delays and cancellations at major European airports.

Cloudflare successfully repelled record-breaking DDoS attacks of 22.2 Tbps, highlighting the critical need for automated, hyper-scale defenses.

AI development platforms are being exploited to host fake CAPTCHA pages, creating highly effective phishing scams. Learn how to protect yourself.

New research shows encrypted robot data can be easily deciphered, exposing sensitive information in medical and industrial settings.

A massive 10TB unprotected database belonging to ClaimPix exposed over 5M files, including sensitive insurance records, powers of attorney, and vehicle VINs.

CISA has added a high-severity V8 zero-day (CVE-2025-10585) to its exploited vulnerabilities catalog. An urgent Chrome update is available to patch the flaw.

Introduction

So… guess what?