ExifLooter finds geolocation on all image urls and directories and also integrates with OpenStreetMap. General info about setting up Exif Looter locally

A new report from Trend Micro details how the Warlock ransomware group is exploiting a vulnerability in unpatched Microsoft SharePoint servers to attack organizations.

A new report reveals how criminals are using the AI website builder Lovable to create tens of thousands of convincing phishing, malware, and fraud websites.

A new report from Cisco Talos exposes Static Tundra, a Russian state-sponsored group that has exploited unpatched Cisco devices for over a decade.

IBM X-Force has exposed QuirkyLoader, a new malware loader that uses DLL side-loading and .NET AOT compilation to deliver Agent Tesla and other threats.

A new report uncovers the "Traffer" economy, a sophisticated cybercriminal ecosystem that uses business-like structures and SEO abuse to steal data at scale.

A critical flaw in the AI tool CodeRabbit allowed a researcher to gain RCE and write access to over a million repositories via a malicious pull request.

A Red Canary report reveals attackers are exploiting an Apache ActiveMQ flaw to breach Linux systems, then patching the vulnerability to hide their presence.

A new Mandiant report reveals a multi-stage USB malware campaign that uses DLL side-loading and stealthy loaders to deploy backdoors and coinminers.

A critical XXE flaw in Apache Tika's PDF parser could allow attackers to access sensitive data and pivot into internal networks via crafted PDF files.

A new report reveals a malicious Python package on PyPI that uses a stealthy dependency and DLL sideloading to deliver a multi-stage malware.

Qualcomm’s new Snapdragon W5+ Gen 2 and W5 Gen 2 wearable chips are the first to support two-way satellite messaging, providing a new layer of safety.

Google has launched the Pixel 10 series, featuring the new Tensor G5 chip, advanced AI features, the Pixelsnap magnetic interface, and a new foldable.

A critical vulnerability (CVSS 9.3) in Docker Desktop could allow malicious containers to gain full control of the host system. Update now to version 4.44.3.

Apple has released an urgent security update to patch a zero-day vulnerability (CVE-2025-43300) in its Image I/O framework that is being actively exploited in targeted attacks.

by Salmaan Mustapha

How I built a detection rule for one of the most elusive C2 techniques used by sophisticated threat actors

NFS Setup Tool v1.0

And how to automate most of it like a seasoned digital sleuth

With data breaches at an all-time high, password fatigue and digital identity theft are now everyday risks. Big tech companies promise…