🚨 Hackers are hijacking Google search ads to trick devs into downloading malware disguised as GitHub tools.

The payload? A 128MB file that hides from sandboxes unless your GPU passes its “check.” Info theft & remote access are the endgame.

Details ↓ https://thehackernews.com/2025/09/gpugate-malware-uses-google-ads-and.html

ታላቁ የኢትዮጵያ ህዳሴ ግድብ ተመረቀ!😍😍

እንኳን ደስ አለን! ኢትዮጵያውያን!! 🇪🇹🇪🇹🇪🇹

@SPORT_433ET @SPORT_433ET

Always 😁

covering reflected xss...a lot to dig

it has been three month since i started this channel and my cybersecurity journey
i hesitated many times to start a channel feeling i have to dig a lot inorder to share something but i understood noone started after being perfect but you will get improved through the journey and yeah good to share the journey , getting help from seniors in the field and building community. still just starting but we will grow through time |GOD HELPS|
happy new year !!!

If you don't spend enough time getting to know ur self , you will end up absorbing everyone else's definition of u
#newyear

just found this website to practice xss
https://xss-game.appspot.com/

here it all starts !!
same origin policy: it stops one website reading or writing data to and from another website
the policy essentially checks for 3 different things in the origin: protocol, host and port
only if the three are the same for two different origin then the browser allows cross read and write

Get ready for Ethiopia CyberShield Showdown Week, featuring bootcamps, red-team exploits, incident response simulations, and a high-stakes Capture the Flag (CTF). Join us to learn, compete, and connect with a chance to win prizes, merch, and recognition.

📅 Event Details

🔹 Online Bootcamp: Sept 17 to 18 | 8:00 PM to 10:00 PM
🔹 In-Person CTF: Sept 19 to 21 | 9:00 AM to 5:00 PM
📍 Capstone, ALX Tech Lideta Hub, Lideta

🔗 Register now: https://luma.com/jyu7twze

#ALXEthiopia #CyberShieldShowdown #CTF2025 #Cybersecurity #ALXAfrica #dohardthings #lifeatalx #yekolotemari

💡 Same-Origin Policy (SOP)
It prevents one website from reading/writing data to another site unless protocol, host, and port all match.
🔒 But what about attacks like XSS?
Cross-Site Scripting (XSS) is a web vulnerability where attackers inject malicious noscripts into trusted websites to run in the victim’s browser.
⚡ Types of XSS:
Stored XSS → Malicious noscript is permanently saved on the target server (e.g., in a database, comment section).
Reflected XSS → Script comes from a crafted link or request and reflects back in the response.
DOM-based XSS → The attack happens fully on the client side due to unsafe JavaScript handling in the DOM.
👉 In short: XSS abuses the trust a site has with your browser.

Samsung fixes critical zero-day CVE-2025-21043 exploited in android attacks and it releases security update for these phones https://security.samsungmobile.com/workScope.smsb

Have u ever wondered why college degree is called "bachelor's degree"?

Just linux things😁

🔰 Famous Platforms to practice Pentesting 🔰

tryhackme
https://tryhackme.com

bWAPP
http://itsecgames.com

flAWS Cloud
http://flaws.cloud

Hack Yourself First
http://hackyourselffirst.troyhunt.com

OWASP Juice Shop
http://juice-shop.herokuapp.com

Google Gruyere
https://google-gruyere.appspot.com

Hack Me
https://hack.me

HackTheBox
https://hackthebox.eu

Root-Me
https://root-me.org

XSS Game
https://xss-game.appspot.com

Pentesterlab
https://pentesterlab.com

OverTheWire
https://overthewire.org/wargames/

Hacking Lab
https://hacking-lab.com/index.html

IO
http://io.netgarage.org

smashthestack
http://smashthestack.org

microcorruption
https://microcorruption.com/login

ExploitMe Mobile
http://securitycompass.github.io/AndroidLabs/index.html

Hax.Tor
http://hax.tor.hu/welcome/

Java Vulnerable Lab
https://github.com/CSPF-Founder/JavaVulnerableLab

Pwnos
http://pwnos.com

Ringzero
https://ringzer0team.com/challenges

Avatao
https://avatao.com

GameOver
https://sourceforge.net/projects/null-gameover/

HSCTF3
http://hsctf.com

#ThreatX
#ThreatXSecurity

I like this😁
Hacker level 0

🚨 Chrome users: a new zero-day is under active attack.

CVE-2025-10585 targets Chrome’s V8 engine—Chrome’s 6th zero-day of 2025.

Details → https://thehackernews.com/2025/09/google-patches-chrome-zero-day-cve-2025.html

⚡ Update now: 140.0.7339.185/.186 (Win/macOS), 140.0.7339.185 (Linux).

If you use Edge/Brave/Opera/Vivaldi, patch too.

Continued 😁
Hacker level 1

just wanted to rehearse the basics and i feel i didn't do enough labs there so ....yeah i'm not here for shortcut just building strong foundations will share the labs and some reports 😊
not to end up being a noscript kiddie😁

🫩