Hacking and Exploits

Web-Hacking, 0-Day, Malware, Ransomware, Exploit, Vulnerabilities, Privilege-Flaw, Privilege-Escalation, Zero-Day, Exploit, Jailbreak, Penetration-Testing, Trojan, Spyware, Rootkit, Worm, Backdoor, Payload, Obfuscation, DDoS, Phishing, MITM, Spoofing, Brute-force, Port-Scan, SQLi, XSS, CSRF, Path-Traversal, LFI, RFI, Insecure-Deserialization, Buffer-Overflow, CVE, Exploit-Kit, Shellcode, bug bounty, ethical hacking, CTF, capture the flag, offensive security, red team exercise, exploit development, reverse engineering, vulnerability research, credential harvesting, zero-click, hack

Page 9

Google Drive turns on AI ransomware detection by default for paying users

Google has moved its AI-powered ransomware detection for Drive out of beta and enabled it by default for paid customers, shifting cloud storage from a passive backup to an active containment point. First trialed in late 2025, the feature now scans files as they sync from desktop endpoints and pauses syncing when ransomware-like encryption is detected, alerting both users and admins and giving organizations a faster path to recovery. Why…

Saugata DattaApr 1, 20263 min read568

Cybersecurity

Hackers Weaponize Legitimate Windows Tools to Kill Antivirus — What Defenders Must Do Now

Ransomware gangs have evolved from noisy mass campaigns into precise, surgical operators. A growing and dangerous trend is the abuse of legitimate Windows utilities — tools built to help administrators troubleshoot and repair systems — as the first step in modern ransomware operations. By repurposing utilities such as Process Hacker, IOBit Unlocker, PowerRun, AuKill and TDSSKiller, attackers can silently neutralize antivirus (AV) and EDR protections, creating a short but effective…

Saugata DattaApr 1, 20265 min read545

Cybersecurity

Notepad++ v8.9.3 Released — cURL Fixes, Crash Repairs, and Enterprise Controls

Notepad++ has shipped version 8.9.3, a maintenance-focused release that closes a notable security gap in its updater, resolves several long-standing stability regressions, and finishes a multi-release migration to a faster XML parser. For administrators and power users who depend on the editor for daily development work, this update is worth prompt attention: it contains both a security remediation and a set of usability and reliability improvements that reduce operational risk.What…

Saugata DattaMar 31, 20264 min read448

Hacking and Exploits

Firefox 149 Ships: Patches for 37 Vulnerabilities, Including Multiple Sandbox Escapes

Mozilla released Firefox 149 on March 24, 2026, in one of the browser’s largest security updates in recent memory. The release fixes 37 vulnerabilities across memory corruption, sandbox escapes, use‑after‑free bugs, JIT miscompilation, and other issues that could enable remote code execution or privilege escalation. Given the number and seriousness of these fixes — 16 high‑severity issues among them — users and organizations should prioritize updating without delay. A clear…

Saugata DattaMar 26, 20266 min read588

Cybersecurity

Citrix Warns: Patch NetScaler ADC and Gateway Flaws Immediately

Citrix has released urgent security updates for NetScaler ADC and NetScaler Gateway after discovering two vulnerabilities that could expose sensitive session data and cause session mix-ups. The company is urging administrators to apply the fixes as soon as possible, citing the potential for exploitation that echoes earlier high-profile memory-leak bugs that were actively abused in the wild. What happened Earlier this month Citrix published advisories addressing CVE-2026-3055 and CVE-2026-4368. The…

Saugata DattaMar 25, 20264 min read647

Data Breach

LiteLLM Supply Chain Breach — 95M Downloads, Import-Time Backdoor, and What Teams Must Do Now

The Python package ecosystem suffered another high-impact supply chain compromise: LiteLLM — a popular library that routes requests across large language model providers and sees tens of millions of downloads — shipped malicious code in recent PyPI releases. Two versions published on March 24, 2026 (1.82.7 and 1.82.8) contained an import‑time backdoor that escalates into credential harvesting, lateral movement, and a persistent remote access implant. For organizations that consume open-source…

Saugata DattaMar 25, 20265 min read571

Cybersecurity

Kali Linux 2026.1 Arrives — New Tools, NetHunter Breakthroughs, and a Nostalgic BackTrack Mode

Kali Linux’s first major release of 2026 lands with a mix of practical upgrades, fresh aesthetics, and a handful of features that will matter to both day-to-day penetration testers and mobile security researchers. Version 2026.1 brings a modernized look, an under‑the‑hood kernel bump, targeted NetHunter enhancements, and eight new offensive-security tools that expand Kali’s capabilities in post‑exploitation, web testing, and adversary emulation. A smoother, refreshed experience The release begins where…

Saugata DattaMar 25, 20265 min read596

Cybersecurity

Oracle Issues Urgent Security Update for Critical RCE in Identity Manager and Web Services Manager

Oracle has released an out-of-band security alert to address a critical remote code execution vulnerability, tracked as CVE-2026-21992, affecting Oracle Identity Manager and Oracle Web Services Manager. With a CVSS 3.1 base score of 9.8 and no authentication required, this is a high-risk flaw that can be exploited remotely over HTTP with minimal complexity. Organizations running internet-facing Fusion Middleware components should treat this as an emergency. What was disclosed Vulnerability:…

Saugata DattaMar 21, 20262 min read521

Cybersecurity

Chrome Security Update Fixes 26 Vulnerabilities That Could Allow Remote Code Execution

Google’s latest Chrome security update is a reminder that even the world’s most scrutinized software still harbors dangerous flaws. In a single release, Chrome developers patched 26 vulnerabilities—three marked critical—that could let unauthenticated attackers run malicious code simply by getting a user to visit a crafted webpage. For anyone who uses Chrome, from casual browsers to enterprise fleets, this is not a routine maintenance note: it’s a prompt to update…

Saugata DattaMar 21, 20264 min read658

AI Agents and Frameworks

AI as Tradecraft: How Threat Actors Operationalize Artificial Intelligence

Organizations are facing a subtle but powerful shift: adversaries are not inventing wholly new attacks so much as adopting artificial intelligence to make existing tradecraft faster, cheaper, and more resilient. Microsoft’s threat intelligence and other industry observers show that generative AI is being embedded across the attack lifecycle to accelerate reconnaissance, scale social engineering, and shorten the time between detection and re‑deployment. The result is a landscape where familiar threats…

Saugata DattaMar 20, 20264 min read730

Cybersecurity

When a Path Traversal Flaw Hits Home: Inside the Ubiquiti UniFi Critical Vulnerabilities

Ubiquiti has quietly become a household name for network hardware in small-to-midsize enterprises, campuses, and savvy home setups. That trust makes the recent disclosure of two serious flaws in the UniFi Network Application especially alarming: one is a maximum-severity path traversal that can enable a full system takeover, and the other is an authenticated NoSQL injection that can escalate privileges. Both merit immediate attention from operators, because the technical details…

Saugata DattaMar 20, 20264 min read486

Cybersecurity

What the Marquis Breach Teaches Us About Vendor Risk and Ransomware Preparedness

Marquis, a Texas-based provider of digital marketing, CRM and analytics services for hundreds of financial institutions, disclosed a major security incident tied to a mid‑2025 ransomware attack that ultimately exposed the personal information of more than 672,000 people. The story is less about a single failure and more about how a cascade of weaknesses—an exploited firewall, third‑party exposure, and slow discovery—can amplify harm across an industry that relies heavily on…

Saugata DattaMar 19, 20263 min read486

Free Tools: IP, DNS, SSL