All Posts
Critical WordPress Alert: Dissecting CVE-2026-15748 (Forminator RCE) & CVE-2026-15826 (UPB Auth Bypass)
CVE-2026-15748 enables critical Forminator RCE, while CVE-2026-15826 allows User Profile Builder authentication bypass. Learn how to detect and patch both
Critical GitLab GraphQL Vulnerability CVE-2026-19478: Patch Now to Prevent Unauthenticated Project Modification
GitLab patched critical CVE-2026-19478, a CVSS 9.4 GraphQL flaw allowing unauthenticated attackers to modify or delete public projects
GitHub Suffers Widespread Service Disruption, API Errors Reach 20% as Webhooks, Actions and Pull Requests Degrade
GitHub is experiencing widespread service disruption affecting APIs, Actions, Webhooks, Pull Requests, Copilot, authentication and repository downloads
Hack The Box Attack Paths: The Complete Easy to Insane Methodology Guide
Master Hack The Box attack paths with this complete guide to Easy, Medium, Hard and Insane Linux and Windows machines, from enumeration to root
The Anatomy of the VMware vCenter Syslog Exploitation and the Babuk ESXi Ransomware Campaign
VMware vCenter CVE-2026-59310 is being actively exploited to compromise vCenter servers and deploy Babuk-derived ransomware on ESXi hosts
The Identity Perimeter is Broken: Inside the Azure Exfiltration Campaign Targeting Global Enterprises
A major Azure data exfiltration campaign allegedly exposed millions of employee records from global enterprises. Here's every affected organization
A Brand-New Account, a “0-Day,” and a JPEG: Assessing the Alleged Discord Steganography Bypass
A new alleged Discord “0-day” claims JPEG steganography can bypass content scanning. We examine the claim, LSB hiding, JPEG payloads, and what actually happens
The Wallet Is Safe. The Customer List Wasn’t: Inside SafePal’s Order-Tracking Breach
SafePal's 2026 data breach exposed 39,798 customers. Here's what was leaked, how the order-tracking flaw worked, and whether your crypto is actually at risk
File Transfer Cheat Sheet: The Practical Hacking Cheatsheet Series
Master file transfers in HTB with this practical cheat sheet covering Linux, Windows, Netcat, SMB, SCP, PowerShell, Base64, HTTP, SSH, Chisel and Ligolo-ng
The GPU Serial Number: How Brave Is Fighting the Next Generation of Web Tracking
Your GPU can help websites recognize your device. See how Brave 1.93 uses farbling to hide WebGL and WebGPU identifiers and disrupt fingerprint tracking
