Cleafy uncovers PlayPraetor, a Chinese-speaking MaaS Android RAT that has infected 11,000+ devices, using real-time control via Accessibility Services to conduct on-device fraud.

APT36, a Pakistan-linked threat actor, is targeting Indian government officials with phishing campaigns that mimic official websites to harvest credentials and Kavach MFA OTPs in real time.

SentinelLABS and Beazley expose PXA Stealer, a Python-based infostealer campaign targeting 62 countries with stealthy DLL sideloading, decoy files, and Telegram-based data exfiltration.

Dell patched a critical flaw (CVE-2025-36594) in DD OS allowing unauthenticated remote auth bypass. DDSH CLI flaws (CVE-2025-30096-30099) also patched.

ThreatLabz reveals the evolution of Raspberry Robin malware, now featuring stronger encryption, complex obfuscation, and a new privilege escalation exploit to bypass detection.

Veracode warns of a North Korean cyber-espionage campaign using malicious NPM packages to spread Beavertail malware and steal crypto from developers via fake interview tasks.

A new report reveals Kimsuky, a North Korea-linked APT, is using sophisticated LNK files and reflective payloads to infiltrate systems and conduct cyberespionage against South Korean targets.

Huntress and other firms warn of a likely zero-day vulnerability in SonicWall VPNs. Attackers are bypassing MFA and deploying Akira ransomware within hours of initial access.

Before the tools come out, I like to get my hands dirty — and here’s why that matters.

Free Link 🎈

Ever tried to peek behind the curtain of a website? Maybe you’re curious how apps talk to each other. Or you keep hearing about “Burp…

How a Simple Payload Uncovered a Real Vulnerability on MTN’s Website

The buried aren’t always silent

Hey there!😁

Ever missed a critical bug because you didn’t chain vulnerabilities?

On Day 1, I learned the basics. On Day 2, I got real. I remember staring at a company’s website, completely lost — where do I even start…

Hey there!😁

Hey there!😁

Rollback em TI permite reverter sistemas a estados anteriores, minimizando impactos de falhas e ataques em ambientes críticos. Saiba mais!

Browsing Reddit recently, I found a lot of hunters who faced a common problem… They studied the theory, did CTFs, and spent time doing Bug…

In this write-up, I’ll introduce the topic of access control in web applications and walk through a lab that demonstrates a vertical…