Hey there, code-cracker! I’m the (slightly sleep-deprived) dev who built this little portal to your inner hacker. You’ll be greeted by a pretty purple gradient, mood-setting particles, and an “UNLOCK” button that absolutely refuses to let you in—unless you…

TL;DR — I built an automation that cloned and scanned tens of thousands of public GitHub repos for leaked secrets. For each repository I…

Pacu's newest scenario, enumerating Elastic Beanstalk for Secrets, was built to save users hours of testing during an AWS penetration test.

Cybersecurity analysts often rely on Google to find relevant information while performing analysis.

Security Engineer Luigi Fragale demonstrates how to glitch the STM32F401 to read protected memory using Python and fault injection.

“So we wait, this is our […]

The official XPRL (Ripple) NPM package was compromised by sophisticated attackers who put in a backdoor to steal cryptocurrency private keys and gain access to cryptocurrency wallets.

0xdeadc0de Infosec

As we pack our bags and prepare for the adult-er version of BlackHat (that apparently doesn’t require us to print out stolen mailspoolz to hand to people at their talks), we want to tell you about a recent adventure - a heist, if you will.

No heist story…

TBD

Summary In the wild exploit targeting Chrome, UAF within the Browser process have frequently been a key vector for sandbox escapes. In this post, we introduce two newly discovered UAF within the Browser process, identified during our vulnerability research.…

Patch CVE-2025-22234 immediately to secure your systems from critical vulnerabilities. Protect your applications and prevent exploits with the latest updates and fixes—don’t wait, act now!

ARMO reveals how io_uring enables rootkits to bypass major Linux security tools like Falco, and Defender. Learn about the Curing rootkit and detection strategies.

525K subscribers in the netsec community. /r/netsec is a community-curated aggregator of technical information security content. Our mission is to…

The post explains the process of finding and exploiting three vulnerabilities found in the IXON VPN client

Explore ONEKEY Research Lab's security advisory detailing a critical vulnerability in Viasat modems. Learn about the risks and recommended actions.

In this post, we explore how to bypass AMSI’s scanning logic by hijacking the RPC layer it depends on — specifically the NdrClientCall3…

Understanding the Evolving Needs, Challenges, and Trends of China’s Software Security Landscape in 2025