Learn about b3acon, a mail-based C2 using an in-memory C# IMAP client and PowerShell for stealthy communication via email drafts.

The Bug Bounty Radar - Discover and explore the latest public bug bounty programs from top platforms. Find security research opportunities, compare rewards, and access the most comprehensive bug bounty database. 8 new programs added recently.

The Ultimate Guide for Privacy-Conscious Users

Explore decrypted Zigbee traffic data for enhanced IoT network security, performance analysis, and smart home automation insights.

Discover how hackers bypass an antivirus such as Windows Defender, using advanced techniques such as direct syscalls and shellcode encryption

This post is about a vulnerability in the Model Context Protocol (MCP) called “Line Jumping,” where malicious servers can inject prompts through tool denoscriptions to manipulate AI model behavior without being explicitly invoked, effectively bypassing security…

Hey there, code-cracker! I’m the (slightly sleep-deprived) dev who built this little portal to your inner hacker. You’ll be greeted by a pretty purple gradient, mood-setting particles, and an “UNLOCK” button that absolutely refuses to let you in—unless you…

TL;DR — I built an automation that cloned and scanned tens of thousands of public GitHub repos for leaked secrets. For each repository I…

Pacu's newest scenario, enumerating Elastic Beanstalk for Secrets, was built to save users hours of testing during an AWS penetration test.

Cybersecurity analysts often rely on Google to find relevant information while performing analysis.

Security Engineer Luigi Fragale demonstrates how to glitch the STM32F401 to read protected memory using Python and fault injection.

“So we wait, this is our […]

The official XPRL (Ripple) NPM package was compromised by sophisticated attackers who put in a backdoor to steal cryptocurrency private keys and gain access to cryptocurrency wallets.

0xdeadc0de Infosec

As we pack our bags and prepare for the adult-er version of BlackHat (that apparently doesn’t require us to print out stolen mailspoolz to hand to people at their talks), we want to tell you about a recent adventure - a heist, if you will.

No heist story…

TBD

Summary In the wild exploit targeting Chrome, UAF within the Browser process have frequently been a key vector for sandbox escapes. In this post, we introduce two newly discovered UAF within the Browser process, identified during our vulnerability research.…

Patch CVE-2025-22234 immediately to secure your systems from critical vulnerabilities. Protect your applications and prevent exploits with the latest updates and fixes—don’t wait, act now!

ARMO reveals how io_uring enables rootkits to bypass major Linux security tools like Falco, and Defender. Learn about the Curing rootkit and detection strategies.