Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
PaperCut zero-day under attack; emergency patch issued
PaperCut NG and MF are under zero-day attack. The company issued an emergency patch and urges users to restrict web interface access.
Kitploit Lists New Redis PoC Exploit Tool
Kitploit, a hacking tools directory, features a new proof-of-concept exploit for Redis, aiding security testing and vulnerability analysis.
ServiceNow patches 3 critical AI Platform flaws
ServiceNow fixed three max-severity AI Platform vulnerabilities allowing code injection, SQL injection, and privilege escalation.
The Sandbox pledges 1:1 repayment after $700K bridge exploit
The Sandbox will repay SAND holders 1:1 after an Aug. 21 bridge exploit drained 14.744 SAND (~$700K) from an Ethereum vault.
Zbtlink Routers Ship with Two Backdoors
VulnCheck found backdoors in over a dozen Zbtlink router models, enabling remote surveillance-like access.
Spring Cloud Function SpEL Vulnerability Tool
Kitploit highlights a tool for exploiting Spring Cloud Function SpEL injection vulnerabilities, aiding security testing.
MSDT Follina Exploit Tool Released on Kitploit
Kitploit features a new tool for the MSDT Follina vulnerability, aiding security testing and exploit analysis.
DNSRPC-BOF: New Tool for DNS RPC Attacks
DNSRPC-BOF is a new cybersecurity tool for penetration testing, focusing on DNS RPC vulnerabilities.
Log4j2 RCE Tool Released on Kitploit
A new tool for exploiting the Log4j2 remote code execution vulnerability has been added to Kitploit, a cybersecurity tools directory.
Next.js Patches Critical AVIF and Windows RCE Flaws
Vercel patched two critical Next.js vulnerabilities enabling unauthenticated RCE via AVIF images and a Windows path traversal flaw (CVE-2026-75604).
ThreatsDay: IoT Botnet, Water Attacks, SharePoint RCE
Weekly threat roundup: 296K IoT botnet, 100+ water systems targeted, SharePoint RCE chain, plus 27 new stories.
Kitploit Lists OWASP-Hunting Tool for Vulnerability
Kitploit features OWASP-Hunting, a tool for finding vulnerabilities and strengthening security. It aids in system analysis and automated testing.