Researchers from Johns Hopkins University and several other institutions have demonstrated a novel, server-side attack against Intel SGX that achieves full extraction of the DCAP attestation key — notably using hardware costing under $1,000....
A developer operating under the handle 0xr0BIT has released a new Windows security-audit tool called TaskHound. It is designed to discover scheduled tasks that run with elevated privileges or that rely on stored credentials—assets...
PhoneSploit Pro An All-In-One hacking tool is written in Python to remotely exploit Android devices using ADB (Android Debug Bridge) and Metasploit-Framework. Complete Automation to get a meterpreter session in One Click This tool can automatically Create, Install, and Run payload...
A newly identified cyber-espionage group, Phantom Taurus, linked to China, has spent the past two and a half years striking government bodies and telecommunications firms across Africa, the Middle East, and Asia. According to...
Researchers at Varonis have reported the emergence of a new toolkit named MatrixPDF, which enables attackers to transform ordinary PDF files into interactive phishing lures. These maliciously crafted documents can bypass email security filters...
Researchers at Tenable have disclosed three vulnerabilities in Google’s Gemini AI, flaws that enabled data theft and remote exploitation. Collectively dubbed the “Gemini Trifecta,” these issues affected distinct modules of the assistant. The first...
More than 48,000 Cisco ASA and Firepower Threat Defense (FTD) firewalls remain unprotected against two critical vulnerabilities that are already being actively exploited. Tracked as CVE-2025-20333 and CVE-2025-20362, these flaws allow remote code execution...
A team of researchers has developed a simple hardware tool that calls into question the very foundations of trusted computing in modern cloud environments. With a device costing less than fifty dollars, they successfully...
Fraudsters have discovered a new method of targeting elderly users by exploiting fake Facebook events and a malicious Android application known as Datzbro. This program masquerades as a legitimate service but enables attackers to...
Broadcom has patched a critical privilege escalation vulnerability in VMware Aria Operations and VMware Tools, which had been actively exploited as a zero-day since October 2024. The flaw, tracked as CVE-2025-41244, was not initially...
A cybercriminal group known as Lunar Spider executed a sprawling operation that began with a single click on a bogus file and culminated in weeks of sustained control over the victim’s infrastructure. According to...
A new open-source project has appeared in TrustedSec’s GitHub repository. The library, named Titanis, is written in C# and designed for interaction with Windows environments. Built on .NET 8, it is cross-platform, supporting both...
