Posted inLabs and Lessons
Hack The Box: Complete walkthrough of the Footprinting Lab – Hard.
The Hack The Box (HTB) Footprinting module teaches you how to analyze and footprint a target. Here's how to derive the solution and capture the flag.
Posted inCybersecurity News
Researchers note a massive surge in .es domain abuse for large-scale phishing attacks.
The cybersecurity landscape is witnessing a dramatic shift as .es domains, traditionally associated with Spain, have become a primary vector for large-scale phishing attacks. Recent data reveals a staggering 19-fold increase in the use of .es domains for phishing between Q4 2024 and Q1 2025, marking the most significant surge in abuse of a country-code top-level domain (ccTLD) in recent memory.
Posted inCybersecurity News
The Abuse of Pickle Files in AI Model Supply Chains: A Growing Security Threat
As artificial intelligence (AI) and machine learning (ML) continue to transform industries, the security of their supply chains has become a critical concern. One of the most significant and underappreciated risks involves the abuse of Python’s pickle files—a serialization format widely used for saving and sharing ML models. Recent incidents have demonstrated how attackers can exploit pickle files to compromise entire AI supply chains, posing substantial risks to organizations and end users alike.
Posted inCybersecurity News
Windows 11 has officially become the most popular desktop operating system in the world, surpassing Windows 10 after four years on the market.
According to the latest data from StatCounter in July 2025, Windows 11 now holds a market share of approximately 50.2%, while Windows 10 has dropped to around 46.8%. This marks a significant milestone, as Windows 10 had dominated the desktop OS landscape since its release in 2015.
Posted inCybersecurity News
Exposed Java Debug Wire Protocol (JDWP) interfaces are a growing attack vector for cryptomining threat actors.
In recent months, cybersecurity researchers have observed a surge in attacks targeting exposed Java Debug Wire Protocol (JDWP) interfaces. Threat actors are leveraging these unsecured endpoints to gain remote code execution capabilities, ultimately deploying cryptocurrency mining malware—most notably, customized versions of XMRig—on compromised systems.
Posted inCybersecurity News
Which search engine prioritizes user privacy and delivers the best search results with insightful AI summaries? Bing’s the new king.
As search engines continue to evolve, users are increasingly concerned not only with the accuracy of their search results but also with privacy and the quality of AI-generated summaries. Here's how Google and Bing compare in three critical areas: privacy protection, search result quality, and the effectiveness of their AI-generated summaries.
Posted inCybersecurity News
No honor among thieves. DOJ investigaes ransomware negotiator for alleged extortion kickbacks.
The U.S. Department of Justice (DOJ) has initiated a criminal investigation into a former ransomware negotiator at DigitalMint, a leading Chicago-based firm specializing in ransomware response and cryptocurrency payments. The investigation focuses on allegations that the ex-employee collaborated with ransomware gangs to profit illicitly from extortion payments.
Posted inCybersecurity News
NimDoor: Resilient macOS malware targets Web3 and cryptocurrency organizations.
A newly identified macOS malware family, dubbed NimDoor, is raising serious concerns among cybersecurity professionals due to its advanced persistence mechanisms and focus on the Web3 and cryptocurrency sectors. Security researchers have attributed NimDoor’s operations to North Korean (DPRK) threat actors, highlighting a significant escalation in the sophistication of macOS-targeted attacks.
Posted inCybersecurity News
Hunters International Ransomware Group shuts down and rebrands as World Leaks with new emphasis on extortion.
The notorious ransomware group Hunters International has announced its shutdown, but cybersecurity experts confirm this is not the end of its operations. Instead, the group is rebranding and shifting its focus, now operating under the name World Leaks with a new emphasis on data theft and extortion rather than traditional ransomware attacks.
Posted inCybersecurity News
And we wonder why we have so many zero-days. Cisco says some dolt embedded hardcoded SSH credentials in its widely deployed enterprise communications platforms.
Cisco has issued an urgent security advisory regarding a critical vulnerability in its widely deployed enterprise communications platforms, specifically Cisco Unified Communications Manager (Unified CM) and Unified CM Session Management Edition (Unified CM SME). This vulnerability, tracked as CVE-2025-20309, poses a severe risk to organizations due to the presence of hardcoded SSH credentials that could allow attackers to gain full control over affected systems.