At a glance Malware family Tengu (Mirai-derived IoT botnet) Threat actor Unattributed; no operator named Target Internet-facing embedded Linux devices, such as routers, cameras, and DVRs Delivery …

At a glance Malware family CastleLoader (loader); payloads include CastleStealer, NetSupport RAT, Lobshot, and NeedleStealer Threat actor Not named in this report; the loader is publicly tied to a…

The Debian project has published security advisory DSA-6405-1, delivering a new Linux kernel update for Debian 13. The update resolves a total of 68 kernel vulnerabilities. Their impact spans loca…

A ColdCard wallet hack has devastated countless Bitcoin investors. Hackers exploited a severe firmware vulnerability to drain user balances. Furthermore, current on-chain tracking data reveals a s…

On August 1st, OpenAI unveiled an unprecedented research milestone on their official blog. They utilized an internal version of “Astra,” their next-generation flagship AI model. Astra …

🚨 Bing Images Had a Critical RCE Vulnerability — And It Only Took One SVG File

A Practical Guide to Modern Web Application Security Assessment for Ethical Hackers, Developers, and Security Engineers

A locked vault stops a thief with a crowbar. It doesn’t stop one who walks in with a gun. Here’s the edge security we put in front of our…

The Origin Energy Data Breach: The Warning That Was Ignored Until 900,000 Customers Paid the Price

Every few months a headline claims that quantum computers are about to break Bitcoin, Ethereum or your favorite DAO treasury. Some of these…

Introduction

A full writeup for the “Do Not Disturb” room, part of TryHackMe’s Hacker Holidays 2026 event (Boot2Root, Day 7) — covering NoSQL Injection…

Singapore penetration testing is a controlled cybersecurity practice used to identify vulnerabilities in systems, networks, and…

Overview

In today’s digital world, cybersecurity has become one of the most important and fastest-growing industries. From businesses and government…

The AI compute race and its commercial payoff are now showing up plainly in the numbers. Alphabet, the parent company of Google, recently released its fiscal 2026 second quarter results. The compa…

At a glance Malware family Unnamed cross-platform RAT (final payload “aone-cli”) Threat actor Unattributed; suspected Chinese-speaking actor Target Developers at Alibaba Group units, i…

Server-2 is a deliberately vulnerable web application designed for practicing User-Agent bypass, directory listing enumeration, CVE…

About Me

LinkedIn:- https://www.linkedin.com/in/vansh-rathore-cybersecurity/