data leak
Western Sydney University has admitted to another major data breach, compromising personal data from over 10,000 students. This follows an alarming history of security failures that signal systemic negligence in protecting sensitive student records.
TweetFeed converts Twitter timelines into RSS feeds without using the Twitter API. It’s a decentralized intel-gathering tool that bypasses authentication, tracking, and rate limits.
robot
A hidden remote access tunnel in Unitree Go1 robot dogs enables full control by Chinese servers, compromising networks at universities and companies worldwide.
osint
Voyage is a subdomain enumeration tool written in Rust that merges active and passive scanning to maximize discovery with minimal noise.
Windows Vulnerabilities
Microsoft credited a cybercriminal known as EncryptHub—responsible for over 618 breaches—for responsibly disclosing two Windows vulnerabilities.
Mark of the Web bypass
A flaw in WinRAR versions prior to 7.11 allows attackers to bypass Windows' Mark of the Web (MotW) security checks using symlinks, enabling silent execution of malicious code. This vector, CVE-2025-31334, reflects a broader pattern of systemic failure in Microsoft’s layered security model.
AI cybersecurity
Google’s launch of Sec-Gemini v1 signals a push toward AI-dominated cybersecurity, but beneath the PR polish lies a deeper power grab cloaked in benevolence.
Akira ransomware
A security researcher reverse-engineered the Akira ransomware's encryption scheme by exploiting timestamp-based key generation and brute-forcing with GPU clusters. His $1,200 solution...
DarkWebDaily.Live
DarkWebDaily.Live has been listed as a darknet investigation resource by OSINTME, a trusted open-source intelligence platform maintained by cybersecurity professional Maciej Makowski.
Oracle
India's National Computer Emergency Response Team (NCERT) has issued a cyber alert regarding an alleged Oracle Cloud breach involving over six million federated login credentials. While Oracle denies the incident, dark web evidence and ongoing phishing attacks suggest otherwise.
Open Source
Thunderbird is quietly launching a suite of open-source services Thundermail, Appointment, Send, and Assist designed to replicate the integration of Gmail and Office365 without the surveillance or vendor lock-in.
VPN
A fifth of the most popular iOS VPN apps are quietly controlled by Chinese companies, including one blacklisted by the U.S. military. The deception runs deep, routed through shell firms and foreign registrations to obscure links to Beijing.