A nearly forgotten utility command has unexpectedly returned to the spotlight after being discovered in new infection chains targeting Windows devices. A mechanism long regarded as a relic of the early internet is now...
A Chinese cyber-espionage group designated by Anthropic as GTG-1002 exploited the capabilities of the Claude Code model in an attempt to breach roughly thirty major corporations and government entities. This is the first documented...
In September 2025, specialists at Anthropic uncovered the first documented cyber-espionage operation in which nearly the entire intrusion cycle was carried out by artificial intelligence. The case involved a series of attacks in which...
Code Auditor CTF A web-based Capture The Flag (CTF) platform offering unparalleled depth and breadth in source code auditing challenges. With the largest collection of real-world C/C++ vulnerability examples available anywhere, users analyze authentic...
BrutDroid 2.0 is a powerful, Windows-optimized toolkit designed specifically for Android Studio, streamlining the setup of a mobile penetration testing lab. Built to make Android pentesting effortless, it automates emulator creation, rooting, Frida server setup, and Burp...
OWASP has updated its list of the most critical risks for web applications, introducing two new categories and revising the structure of its ranking. The organization has published a draft of the 2025 edition,...
SigmaOptimizer is a End-to-End Sigma rule generation and optimization tool that automatically creates, tests, and improves Sigma rules based on real-world logs using LLM. It is implemented as a PowerShell script and integrates log analysis, rule evaluation, and iterative...
A new iteration of the RondoDox botnet has been uncovered, exhibiting a dramatic escalation in both scale and technical sophistication. Whereas the original variant described in autumn 2024 exploited only a handful of vulnerabilities...
The Taiwanese company QNAP has released updates for its systems addressing seven zero-day vulnerabilities unveiled by participants at Pwn2Own Ireland 2025. The flaws affected the company’s proprietary operating systems QTS and QuTS hero, as...
Researchers discovered several NuGet packages in the public registry that conceal covert sabotage code scheduled to activate in 2027 and 2028. The tainted packages target three popular .NET data engines—Microsoft SQL Server, PostgreSQL, and...
A seemingly simple idea — to streamline the management of a home network and enhance its security — unexpectedly turned into a sequence of near-catastrophic mistakes, all triggered by the advice of popular AI...
In 2025, users continue to rely on the most elementary password combinations to protect their accounts. A study by Comparitech, based on the analysis of more than two billion real passwords leaked on data...