The U.S. cybersecurity agency CISA has added a critical, actively exploited flaw in Adobe Experience Manager to its Known Exploited Vulnerabilities catalog: a configuration vulnerability, CVE-2025-54253, rated as a CVSS 10, which permits arbitrary...
Synacktiv researchers have documented a novel GNU/Linux rootkit, LinkPro, uncovered during an investigation into an AWS infrastructure compromise. The intrusion began with exploitation of a vulnerable Jenkins server, after which the threat actors deployed...
Flightradar24 represents the industry standard for professional flight tracking, serving over 4 million daily users worldwide through its comprehensive real-time aviation data platform. This Swedish-developed service leverages the world’s largest ADS-B receiver network, encompassing...
PolarDNS is a specialized authoritative DNS server written in Python 3.x, originally developed as a tool for security testing of DNS recursive resolvers from the server-side. It allows the operator to produce custom DNS...
ScrapPY: PDF Scraping Made Easy ScrapPY is a Python utility for scraping manuals, documents, and other sensitive PDFs to generate targeted wordlists that can be utilized by offensive security tools to perform brute force,...
Researchers at Trend Micro have documented a large-scale operation codenamed ZeroDisco, in which attackers weaponized a critical flaw in Cisco’s SNMP implementation (CVE-2025-20352, CVSS 9.0) to implant rootkits and execute arbitrary code on network...
The internal announcement system at Harrisburg International Airport in Pennsylvania was temporarily disabled after unidentified individuals gained unauthorized access on the evening of October 14, broadcasting a political message calling for “Freedom for Palestine.”...
Over the past two decades, China’s vulnerability research industry has evolved from a disorganized network of enthusiasts into a highly structured ecosystem deeply intertwined with state interests. In the early 2000s, it was a...
RPC Investigator RPC Investigator (RPCI) is a .NET/C# Windows Forms UI application that provides an advanced discovery and analysis interface to Windows RPC endpoints. The tool provides a visual interface around the existing core...
F5 has disclosed a serious cybersecurity incident involving the compromise of its internal systems, including the BIG-IP development environment and engineering knowledge bases. According to the company’s investigation, the breach was carried out by...
A sweeping international investigation by Lighthouse Reports and thirteen media partners across Europe, Africa, and Asia has uncovered a vast surveillance network that operated for more than a decade, spanning 160 countries. At its...
Pavel Durov announced that Telegram had sent a message to its users in France, warning them about an attempt by the European Union to pass a law that would require messaging platforms to scan...
