The ZDI team offers an analysis of how CVE-2025-0411, a zero-day vulnerability in 7-Zip was actively exploited to target Ukrainian organizations through spear-phishing and homoglyph attacks.

Free educational courses in reverse engineering, malware analysis, and programming - Perkins-Fund/Malware-Bible

USAID has pushed nearly half a billion dollars ($472.6m) through a secretive US government financed NGO, "Internews Network" (IN), which has “worked with” 4,291 media outlets, producing in one year 4,799 hours of broadcasts reaching up to 778 million people…

Crypto ransomware experienced significant changes in 2024 with total ransom payments decreasing 35.82% YoY. Learn more in the 2025 Crypto Crime Report.

⬛️ CLI tool for saving complete web pages as a single HTML file - Y2Z/monolith

I recently read the Unlimited Results: Breaking Firmware Encryption of ESP32-V3 paper. This paper is about breaking the firmware encryption feature of the ESP32 SoC using a Side-Channel attack. This was an interesting read, and soon, I wanted to try to reproduce…

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot m...

Ransomware.live tracks & monitors ransomware groups' victims and their activity. It was created by Julien Mousqueton, a security researcher. The website provides information on Ransomware groups, victims, negotiations, and payment demands. It also includes…

Two Estonian nationals pleaded guilty yesterday for their operation of a massive, multi-faceted cryptocurrency Ponzi scheme that victimized hundreds of thousands of people from across the world, including in the United States. As part of the defendants’ guilty…

In this lesson, I will teach you how to create a secure C2 infrastructure on the AWS cloud. Firstly we will discuss what a C2 infra is, and it's design, ending up in building our own from start to finish.

The ubiquitous ESP32 microchip made by Chinese manufacturer Espressif and used by over 1 billion units as of 2023 contains an undocumented "backdoor" that could be leveraged for attacks.

In the previous blog post on ADCS (Goad Pwning Part 6), ESC1, ESC2, ESC3, ESC4, ESC6, and ESC8 were exploited.

Recently, some media have reported on a press release initially calling out ESP32 chips for having a “backdoor”. Espressif would like to take this opportunity to clarify this matter for our users and partners.

《APT Individual Combat Guide》. Contribute to GhostWolfLab/APT-Individual-Combat-Guide development by creating an account on GitHub.

Meet the ESP-FLY, a tiny yet powerful *ESP32 micro drone* you can 3D Print or build from PVC and control with just your phone via WiFi! 📱 No expensive transmitters, no complicated setups, just pure fun. In this video, I’ll guide you step by step through building…

A research-backed AI scenario forecast.