Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Search

News

AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks via SecurityWeek
Node-RED authentication hole being exploited in the wild via CSO Online
UK organisations warned to brace for AI-powered ransomware attacks via CSO Online
Russia-Aligned Gorbag Hackers Exploit WinRAR Flaw to Deploy Data-Stealing Malware via The Hacker News
Google Dismantles XCPE Botnet of 1.3 Million Android Devices via SecurityWeek
Package managers have an integrity problem via Trail of Bits Blog
EMudhra Intermediate CA Certificates Compromised via Unit 42 (Palo Alto Networks)
“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime Activities via Unit 42 (Palo Alto Networks)

Vulnerabilities

CVE-2025-66837 A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrar...
CVE-2026-105606 Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables...
CVE-2026-114444 The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before...
CVE-2026-114443 The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before...
CVE-2026-69414 Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine...
CVE-2026-49255 electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client....
CVE-2026-45321 On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42...
CVE-2026-115196 An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit...

Tools

x64dbg
YARA
CAPE Sandbox
FLOSS