The CyberSec Guru
WPSplinter: a 16-year-old flaw in Broadcom’s Wi-Fi SDK lets anyone in range run code on your router
WPSplinter exposes a 16-year-old Broadcom Wi-Fi flaw that lets attackers execute code on vulnerable routers without a Wi-Fi password
ConnectWise Cloud Backup Breach: OAuth Abuse, Microsoft 365 Exposure, IoCs and Remediation Guide
The ConnectWise Cloud Backup breach exposed Microsoft 365 tenants to OAuth abuse. Explore IoCs, affected app IDs, attack details and remediation
OpenCode API Key Breach: Third-Party AI Credentials May Have Been Exposed
OpenCode warns that OpenAI and Anthropic API keys may have been exposed after unauthorized access to a legacy system. Learn what happened and how to protect your credentials
PS5 Firmware 14.10 Jailbreak Research: Inside Sony’s Kernel Defences, Failed ROP Exploits and the Search for Kernel Access
Has the PS5 firmware 14.10 been hacked? New jailbreak research reveals failed ROP exploits, kernel security tests and the search for kernel access
AdFection: How Targeted Online Ads Became a Zero-Click Spyware Delivery Vector
AdFection spyware exposed how targeted online ads delivered zero-click exploits. Explore Discover-Tech, Controlium, Candiru and the attack chain
French Supermarket Refrigeration Hack: Danfoss Vulnerabilities Explained
France's supermarket refrigeration cyberattack exposed OT security risks. Explore Danfoss AK-SM 800A vulnerabilities, CVEs and mitigation steps
The 37-Year Old Bug: How a Legacy OpenBSD Code Enabled a Root Exploit on OpenBSD 7.9 Despite KARL, SMAP and SMEP
OpenBSD 7.9 Big Fish exploit explained: how a 37-year-old kernel bug bypasses KARL, SMAP and SMEP to achieve local root, plus patches
Critical Nextcloud Collabora Flaw Enables Unauthenticated Command Execution Through Built-in CODE Server
CVE-2026-110447 is a critical Nextcloud Collabora RCE flaw exploited in the wild. Learn affected versions, attack details, web shell indicators, and fixes
Unsealed court records expose Telegram’s U.S. law enforcement pipeline, including the “non-public” email address at the center of it
Telegram court records reveal user IDs, phone numbers, IP logs and a disclosed U.S. law enforcement email. Here's what the records mean for privacy
Beginner’s Guide to Conquering Autopilot on Hack the Box
Conquer Autopilot on Hack The Box like a pro with the beginner's HTB writeup. Dominate this challenge and level up your cybersecurity skills
