ghostyjoe™

At a glance Field Detail Malware family Modified XMRig 6.25.0 botnet implant (marked “PRIVATE VERSION FOR BOTNET”), cross-compiled with musl libc Threat actor Unidentified; campaign tr…

TL;DR NVIDIA recently published an urgent software update for NVIDIA Dynamo for Linux. This update patches several security issues, including a critical NVIDIA Dynamo flaw. The most severe vulnera…

TL;DR Security researchers have detailed a critical Linux suTrap local privilege escalation flaw. This interactive su TIOCSTI bug allows an unprivileged user to gain root access during an active s…

Today, we are going to solve the Blue room on TryHackMe. This room is great for beginners and teaches the basic steps of penetration…

When I first got into cybersecurity, I had one question stuck in my head:

Learn how to solve the TryHackMe Linux Jump room by exploiting anonymous FTP access, chaining Linux misconfigurations, and escalating…

Kaspersky links OctLurk and SilkLurk to cyberespionage attacks stealing passwords, emails and files from government systems in six countries since January 2025.

Users of anonymous operating systems typically rely on the guarantee that no single program running within the environment can betray their true identity. Sometimes, however, a solitary flaw in th…

The One Sentence That Explains Everything

Cybersecurity can seem intimidating when you first encounter terms such as ethical hacking, Linux, virtual machines, networking, ports, and…

TL;DR A Linux kernel use-after-free in SCTP, tracked as CVE-2026-64564, allows local attackers to gain root. Researchers demonstrated privilege escalation and container-to-host escape on five dist…

The Tails project shipped Tails 7.10.1 as an emergency release on August 5, 2026. This update addresses two critical security flaws – one in the Linux kernel and one in the expat XML library…

TL;DR Security researcher Hyunwoo Kim (@v4bel) disclosed a KVM escape vulnerability named Zapscape. Tracked as CVE-2026-64561, it lets a guest break out to the host. The attacker can then run comm…

TL;DR A Linux kernel eventpoll flaw lets a local user climb to root. Tracked as CVE-2026-43074, it scores 7.3 on CVSS. Researchers confirmed a working root shell on a Pixel 10 Pro. The full detail…

Sunset: Decoy Walkthrough

🚨 HP ThinPro’s “Encrypted” Thin Clients Aren’t as Secure as You Think

Imagine sending a WhatsApp message to someone in another country and receiving a response within seconds.

Difficulty: Easy Category: Web Application Time Required: 40 min