An in-depth investigative report on the March 2026 LiteLLM supply chain attack. Discover how the Trivy GitHub Actions hack led to a massive PyPI compromise

On March 20th, 2026, the FCC banned the purchase, import and sale of foreign-made routers, citing supply-chain and security concerns. The FCC fails to account for weak credentials and firmware vulnerabilities, which serve as the initial access vectors for…

Análise técnica de infostealer encontrado nas versões 1.82.7 e 1.82.8 do pacote LiteLLM

Your AI assistant just received a WhatsApp message. It ran a shell command. Then it wrote new code and executed...

Magento remains one of the most popular e-commerce solutions in use on the internet, estimated to be running on more than 130,000 websites. It is also offered as an enterprise offering by Adobe under the name Adobe Commerce, which receives automatic patching.…

NTLM-Relaying is a common attack vector in internal networks. In this blog post, we will show that even in 2026, there are still many scenarios where NTLM-Relaying can be successfully performed, and we will provide some insights into how to mitigate these…

Daniel Kachakil, Principal Security Engineer, explores AQL injection vulnerabilities in ArangoDB and introduces a new tool: aqlmap.

Governments around the world are introducing age-verification and youth social-media laws, but these policies may be doing far more than protecting children. They are quietly pushing identity into operating systems, app stores, and the core infrastructure…

How a series of overnight attacks revealed a card testing vulnerability – and the countermeasures that actually worked.

Posted by PastAcanthisitta3863 - 3 votes and 0 comments

Overview This post explores how modifying a Dell UEFI firmware image at the flash level can fundamentally undermine platform security without leaving visible traces in the firmware interface. By directly...

Discover how China-linked Red Menshen uses the stealthy, kernel-level BPFDoor backdoor to infiltrate global telecom networks and spy on users

DVRTC is a vulnerable VoIP and WebRTC lab for hands-on security training, with exercises covering SIP enumeration, RTP attacks, TURN abuse, and more.

Ласкаво просимо до нашого ІТ-блогу — незалежного кіберпростору для тих, хто хоче розуміти, як насправді працюють технології, сервери та безпека в сучасному

Lasso research reveals a 42% bypass rate in ServiceNow’s AprielGuard. Discover why standalone guardrails often fail in enterprise AI environments.

On March 27th, the telnyx popular PyPI library was compromised. new versions of telnyx were uploaded to PyPI, 4.87.1 and 4.87.2. Both contains malicous payload, this compromise is linked to TeamPCP

How the PhishU Framework simulates ClickFix with callback analytics, reporting, and campaign-specific training.

How the PhishU Framework simulates Microsoft Entra OAuth Consent Grant phishing with persistent token capture, live notifications and an interactive Token Explorer.