CVE
Cyber Attacks
Cyber Crime
This blog explores how advanced AI techniques played a crucial role in discovering CVE-2025-37899, a critical use-after-free vulnerability in the Linux kernel’s SMB server (ksmbd). Learn about the root cause, exploitation risks, and effective mitigation strategies to safeguard systems against this high-severity security flaw.
In 2025, attackers don’t brute-force their way in—they blend in, using stealthy tactics like living-off-the-land, obfuscation, and behavioral mimicry to evade detection. This blog unpacks how modern defenders can think like hunters, spot the subtle clues, and build skills to detect what others miss.
In a world of AI-driven APTs and stealthy cyber threats, Red Teaming is the new frontier of cybersecurity defense. This blog dives into the mindset, methods, and real-world applications of Red Teaming, showing students how to think like an adversary and unmask hidden attacks. Learn the differences between pen testing and Red Teaming, explore tools and labs to get started, and discover why Red Teaming is the cybersecurity edge in 2025.
Discover how everyday IoT devices like smart TVs and speakers can be hacked and used as backdoors to your network — and how to stay protected.
Discover the rising threat of CPU-level ransomware—malware that hides in hardware, bypasses antivirus software, and survives OS reinstalls. Learn how it works, past real-world attacks, and how to stay protected.
In 2025, cyber threats have evolved into stealthy software-based attacks by nation-states and criminal groups. This blog decodes the MITRE ATT&CK Framework—an open-source playbook that helps defenders map out attacker behavior and detect Advanced Persistent Threats (APTs). Written from a student’s perspective, it explains how ATT&CK is more than theory—it’s a real-world blueprint for cyber defense.
In 2025, programming languages have become both cyber weapons and digital shields. This blog explores how modern coders sit at the frontline of cybersecurity—where Python scripts, C++ exploits, and AI tools shape the future of digital conflict. From real-world attack vectors to defensive coding practices, discover how your code can either break or protect the system. Whether you're a student or a seasoned dev, this is your call to code responsibly in a cyber-connected world.
In today’s world of increasing cyber threats, writing secure code is more important than ever. This blog explains why developers must prioritize security from the start, highlights common mistakes, and provides practical coding practices to avoid them. Whether you're a beginner or an experienced developer, you'll learn how to write safer, more resilient software.
Tech
You begin with the first challenge "Exploiting Access", where your journey starts by reverse-engineering an APIC Ele. Through careful analysis, you discover crucial and hidden information that serve as the kay to exploiting the Mt system's weakne. With these insights, you successtaly breach the first machine (M1). gaining access to it. As you transion to the second challenge "Mastering Control, phase involves leveraging the foothold on Mt. extracting critical dala, and exploiting the relationship between Att and M2 to gain Having gained access to Mt, your thjective now is to move deeper by enumerating your findings which will allow you to sing to the second machine. This full control over the second machine. In summary, this CTF event challenges you to exploit vulnerabilities from an APK to compromiss the first machine and then use that access to navigate your way to the second, ultimately gaining control over both machines.
Cybersecurity breaches have become an unfortunate hallmark of our digital age, with state-sponsored attacks becoming increasingly bold and sophisticated. One such incident, recently disclosed, has shaken the telecommunications world to its core: the Salt Typhoon cyberespionage operation.
The crypto industry often hailed as the vanguard of modern financial innovation faced a tumultuous 2024 marred by significant losses due to cyber threats. According to Cyvers' latest Security Fraud and Compliance Report the sector lost over $2.361 billion to cybercriminal activities marking a 40% increase from the $1.69 billion lost in 2023.
Turla, a Russia-linked Advanced Persistent Threat (APT) group with a history spanning nearly three decades. Known for their stealthy and innovative approaches, Turla continues to raise the bar for nation-state cyber operations. Their latest campaign unveiled by Lumen Technologies Black Lotus Labs reveals an extraordinary feat of infiltration: hijacking the command-and-control (C2) infrastructure of Storm-0156 a Pakistan-based hacking group to expand their espionage activities.
Okta, a widely recognized identity and access management service, is integral to safeguarding user authentication for organizations around the world. Known for its ability to streamline secure access to various applications and systems, Okta supports a broad range of authentication methods, including multi-factor authentication (MFA) and single sign-on (SSO). With millions of users and enterprises relying on Okta’s infrastructure for seamless and secure access, any discovered vulnerabilities have the potential for widespread implications.
This blog is about IDOR vulnerability found by cert-in that can cause concern to Aadhaar card or pan card
