Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
CCTV
Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.
Porsche’s Gas-Powered Macan Is Making a Comeback
The gas-powered Porsche Macan will return. And news of its unexpected comeback comes from the most reliable source of them all: the automaker’s new CEO, Mark Leiters, according to The Financial Time
U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploi
Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes
Dell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that could be exploited by bad actors to take over susceptible systems. The vulnerabilities are listed below - CVE-2026-63688 (CVSS score: 10.0) - A missing authentication for
Database startup Supabase raises $150M, acquires Turso
Supabase Inc., a startup that commercializes the open-source PostgreSQL database, has raised $150 million in funding. Singapore’s GIC sovereign wealth fund led the deal. It was joined by Alphabet Inc.’s CapitalG, IronArc and SquarePeg. Supabase announced the
RAM, Muse, CloudSyncD, Springsteen, Software, Persistence, and Michael Jenkins - Michael Jenkins - SWN #621
RAM, Muse, CloudSyncD, Springsteen, Who Owns Your Software?, Persistence, Michael Jenkins, CTO of ThreatLocker, and More on this episode of the Security Weekly News. Segment Resources: https://www.bleepingcomputer.com/news/security/malicious-ai-agents-steal-6
Report: Amazon to offload $8B worth of AI chips, lease them back
Amazon.com Inc. reportedly plans to offload some of its artificial intelligence chips and then lease them back. The Financial Times today cited sources as saying that the transaction would involve a special purpose vehicle, or SPV. A SPV is a type of legal en
OpenAI alerts 100+ orgs that its 'misaligned models' attempted to break in - or worse
OpenAI's agents have repeatedly strayed beyond their intended scope. Two separate reports detail the activity, including one from Sam Altman’s company saying it has notified more than 100 organizations about potentially problematic model activity. OpenAI, in a late Wednesday update to its ongoing Hu
Digitized Greek Manuscripts, Aloha Stadium Events, Digital Archiving, More: Friday Afternoon ResearchBuzz, October 2, 2026
NEW RESOURCES From Université Laval and machine-translated from French: The Library has digitized seven ancient manuscripts written in Greek. “The Rare and Antiquarian Books section of the Laval University Library has just […]
Beyond hacking: How foreign governments can exploit vulnerabilities to manipulate elections
A recent report by the Brazilian Intelligence Agency (ABIN) pointed to the possibility of direct interference by the United States in the upcoming Brazilian elections, the first round of which will t
Cisco SD-WAN’s URL Encoding Bypass Grants Unauthenticated Admin Access. Federal Agencies Have 24 Hours.
A critical authentication bypass vulnerability, tracked as CVE-2026-76504, is currently being exploited in the wild against Cisco Catalyst SD-WAN Manager. The vulnerability, which carries a CVSS score of 9.8, allows unauthenticated remote attackers to gain ad
PEASS-ng v20261002-82d9fad1
PEASS-ng - Privilege Escalation Awesome Scripts SUITE new generation Linux Privesc official course to master LinPEAS Check https://hacktricks-training.com/courses/lhe/ to learn tens of linux prives