Cisco SEG Zero-Day RCE: Unauthenticated Root Execution in Active Campaigns
Originally published on satyamrastogi.com Cisco patches critical zero-day in Secure Email Gateway enabling unauthenticated remote attackers to execu…
Open Source
⚑ Сообщить о проблемеПоследние новости Open Source от Tech News
Все темы
AI
agents
ai
api
architecture
automation
backend
beginners
career
database
devchallenge
devops
discuss
javascript
linux
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
Danfoss Refrigeration RCE: OT Sabotage via Supply Chain Compromise
Originally published on satyamrastogi.com French supermarket chains targeted via Danfoss controller compromise. Remote defrost attack exploited unpa…
Automating Threat Intelligence: Integrating CVE Bots and Open Datasets into Your SecDevOps Pipeline
Originally published on tamiz.pro . Introduction: The Shift from Reactive to Proactive Security The traditional security operations model is no long…
Researchers used Claude to hack OpenAI
Researchers used Claude to reach an OpenAI employee account and sensitive GitHub data.
Metasploit in a lab: what the framework does and where it lies to you
// Understanding Metasploit's Role in Your Lab When setting up a lab environment to test security controls, Metasploit is often the go-to framework…
DaemonCore Academy: Into the Microsoft Store we go!
**# We Somehow Got DaemonCore Into the Microsoft Store I:=DAEMONCORE` Well, this is pretty damn cool. DaemonCore Academy is officially available thr…
Hacking VaultGate: Three Paths to One Flag
Target: http://192.168.122.1:3000 — a local Docker deployment of VaultGate on my lab network (your target IP will differ). Download VaultGate: it's…
Позер vs. Тру, или Как мы провели Endpoint Hack Zone
Есть ложь, большая ложь, а есть… обещания, которые вы читаете в бесчисленных рекламных материалах. Наша команда Endpoint Security решила доказать де…
Path Traversal
What is path traversal? Path traversal is also know as directory traversal. These vulnerabilities enable an attacker to read arbitrary files on the…
Железный ключ к Secure Boot RK35xx
Уже несколько лет в Positive Labs мы исследуем механизмы безопасности в SoC RK35xx от Rockchip. За это время нам и другим исследователям безопасност…
Google says hackers are calling financial firm employees to hack and extort victims
Groups of hackers are breaking into large U.S. financial firms to steal sensitive data and extort victims, Google’s security researchers report.
How to Earn $10k+/Year from Bug Bounties
How to Earn $10k+/Year from Bug Bounties tags: security, bugbounty, money, hacking How to Earn $10k+/Year from Bug Bounties: A Practical Roadmap You…
OT Isolation as Attack Surface: Weaponizing CISA's Defense Guidance
Originally published on satyamrastogi.com CISA's new OT isolation guidance reveals defensive assumptions attackers exploit. Improperly segmented net…
How AI guardrails are impeding the work of offensive cybersecurity researchers
We spoke with several cybersecurity researchers, who look for unknown vulnerabilities and develop tools to exploit them, about how OpenAI’s and Anth…
Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk
Two critical security flaws in WordPress’ software have given hackers the chance to remotely take over tens of millions of websites, according to an…
Hackers quickly prove that Neo Geo Doom ports are not "impossible"
Clever coding and graphical compromises get a classic game on more classic hardware.
A new unpatchable flaw in Apple chips opens the door to an iPhone jailbreak
European offensive cybersecurity company Paradigm Shift released details of a flaw and a technique to exploit it that opens the door for hackers to…
Cybercriminals allegedly hacked tens of thousands of Fortinet firewalls used by major companies all over the world
An alleged Russian-speaking group of cybercriminals are reportedly compromising and targeting several major companies that use Fortinet Firewalls an…
JetBrains Marketplace Supply Chain Attack: 15 Malicious AI Plugins & API Key Exfiltration
Originally published on satyamrastogi.com Security researchers identified 15 malicious JetBrains plugins masquerading as DeepSeek AI assistants. Att…
Доверенная загрузка без доверия: уязвимость в SoC Ky X1
Так уж повелось, что в Positive Labs исследованиями одноплатных платформ чаще всего занимаюсь я. Задачи при этом бывают разными: где-то нужно включи…
Former cyber executive turned whistleblower accuses IBM of covering up several data breaches
IBM and two of its subsidiary companies were allegedly breached during the mid-2010s, which a lawsuit filed by a former cybersecurity executive accu…
Hackers hijacked Instagram accounts by tricking Meta AI support chatbot into granting access
Several users on social media reported having their Instagram accounts hacked over the weekend. Meta's own support chatbot was blamed for allowing h…
HackTheBox. Прохождение Mini Pro Lab Unintended
Компания Unintended недавно перевела свою инфраструктуру на Active Directory . Руководство обеспокоено тем, что устаревшие методы и упущенные из вид…
Kash Patel’s clothing brand website shut down after reports it was hacked
According to users on X, the website was hijacked by hackers in an attempt to trick visitors into installing malware.
A spyware investigator exposed Russian government hackers trying to hijack Signal accounts
A group of likely Russian government hackers tried to hack a security researcher who investigates spyware attacks. He was then able to turn the tabl…
Most Beginners Approach Bug Bounty Completely Wrong
Bug Bounty Isn’t What You Think It Is By Tariq Davis I’m not a veteran bug bounty hunter. I’m a cybersecurity student who got curious about how peop…
Ubuntu services hit by outages after DDoS attack
A group of hacktivists have claimed responsibility for a distributed denial-of-service attack, which has affected several Ubuntu and Canonical websi…