Posts

TraceBack Box Writeup From HTB DOT EU

Looking at the box on HTB rating and graph levels , it looks more of a CTF — Lik...

Infrastructure Pivoting: How CTI Analysts Expand From a...

The field manual for tracing attacker infrastructure — from one domain to dozens...

Found a Denial of Service Vulnerability in a Major Comp...

A step-by-step story of reconnaissance, discovery, and responsible disclosureBug...

How I Found a Hardcoded RSA Private Key in a Major Cryp...

How I Found a Hardcoded RSA Private Key in a Major Crypto Exchange’s Frontend -A...

Ploutus Malware: Uptick in ATM jackpotting incidents pr...

Three weeks ago, renewed activity involving Ploutus ATM malware surfaced, prompt...

CISA Flags Apple, Craft CMS, Laravel Bugs in KEV, Order...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added...

Oracle Patches Critical CVE-2026-21992 Enabling Unauthe...

Oracle has released security updates to address a critical security flaw impacti...

Trivy Security Scanner GitHub Actions Breached, 75 Tags...

Trivy, a popular open-source vulnerability scanner maintained by Aqua Security, ...

FBI Warns Russian Hackers Target Signal, WhatsApp in Ma...

Threat actors affiliated with Russian Intelligence Services are conducting phish...

Trivy Supply Chain Attack Triggers Self-Spreading Canis...

The threat actors behind the supply chain attack targeting the popular Trivy sca...

Who is the Kimwolf Botmaster “Dort”?

In early January 2026, KrebsOnSecurity revealed how a security researcher disclo...

How AI Assistants are Moving the Security Goalposts

AI-based assistants or "agents" -- autonomous programs that have access to the u...

Microsoft Patch Tuesday, March 2026 Edition

Microsoft Corp. today pushed security updates to fix at least 77 vulnerabilities...

Iran-Backed Hackers Claim Wiper Attack on Medtech Firm ...

A hacktivist group with links to Iran's intelligence agencies is claiming respon...

Feds Disrupt IoT Botnets Behind Huge DDoS Attacks

The U.S. Justice Department joined authorities in Canada and Germany in dismantl...

AI Conundrum: Why MCP Security Can't Be Patched Away

RSAC Conference Preview: MCP introduces security risks into LLM environments tha...