GSocket Backdoor Unleashed: Deep Dive into a Malicious Bash Script Campaign
Analysis of a GSocket backdoor delivered via Bash script, detailing its mechanisms, impact, and advanced forensic strategies.
Blog, articles
20 Hours to Catastrophe: How Hackers Exploited a Critical Langflow CVE in Under a Day
Threat actors rapidly exploited a critical Langflow CVE within 20 hours, highlighting urgent AI supply chain security risks.
Feds Dismantle Massive IoT Botnet Empire: A Technical Deep Dive into the Aisuru, Kimwolf, JackSkid, and Mossad Takedown
US, Canadian, German authorities disrupt four major IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad) behind record DDoS attacks.
Patch Now: Critical Unauthenticated RCE Flaw in Oracle Fusion Middleware Demands Immediate Action
Urgent patch required for Oracle Fusion Middleware. Critical RCE vulnerability allows unauthenticated attackers full system control.
Critical Compromise: Trivy GitHub Actions Hijacked, 75 Tags Breached to Exfiltrate CI/CD Secrets
Trivy GitHub Actions compromised again, 75 tags hijacked to steal CI/CD secrets, highlighting critical supply chain vulnerabilities.
Roku's Howdy Service: Unpacking the Cybersecurity and OSINT Implications of Ad-Free Streaming and Disney Content
Analyzing Roku's Howdy ad-free streaming with Disney, its data footprint, security risks, and OSINT value for researchers.