Users of Keenetic routers, mainly in Russia, have been exposed in a major data leak revealing sensitive credentials, device details, network configurations, and logs.

OPKSSH (OpenPubkey SSH) is now open-sourced as part of the OpenPubkey project. This enables users and organizations to configure SSH to work with single sign-on technologies like OpenID Connect, removing the need to manually manage & configure SSH keys without…

Autonomous Privilege Escalation using AI. Contribute to M507/RamiGPT development by creating an account on GitHub.

Discover new target domains using Content Security Policy - GitHub - edoardottt/csprecon: Discover new target domains using Content Security Policy

Message From wsrp4echo : 
Hello. I’m wsrp4echo. I’m not just a vulnerability — I’m a chain reaction.
Born not from a bug, but from trust…

The OpenVPN community released version 2.6.14 on April 2, 2025, specifically to address this server-side vulnerability. 

Huntress observed in-the-wild exploitation of CVE-2025-31161, an authentication bypass vulnerability in versions of CrushFTP and further post-exploitation leveraging MeshCentral and other malware.

As Tax Day approaches in the United States on April 15, Microsoft has detected several tax-themed phishing campaigns employing various tactics. These campaigns use malicious hyperlinks and attachments to deliver credential phishing and malware including RaccoonO365…

SAST and DAST Scan Supported with 400 plus rules available for secrets and allow you add your own wordlist as well. lightweight source code scanner and for URL that detects hardcoded secrets like ...

In Part 2, we shift our focus to the malware campaigns linked to Proton66, where compromised WordPress websites were leveraged to target Android devices.

Изучили популярное хранилище секретов с открытым исходным кодом: проанализировали механизм проверки прав и возможность удаленного выполнения кода