Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
One Exploit Chain, Two Espionage Campaigns: Chrome and Windows Under Fire
Two China-linked groups ran identical Chrome/Windows zero-day exploits against NGOs, before Chrome’s patch shipped, deploying different backdoors each. Two China-linked threat actors used the same Chrome/Windows zero-day against NGOs starting September 1, 202
Cyber security, hacking conferences to be held in Kochi in Oct, says Keralam Police chief
The eight-day conference will bring together cyber security experts, law enforcement agencies, industry leaders, researchers, technology professionals, academicians and students from across India and around the world
China's spy chief warns AI could bring an end to Communist party rule
The head of China's spy agency has warned that artificial intelligence endangers the country's national security, and could potentially bring an end to the Communist Party's rule. 'Hostile forces' w
What Zero-Day Response Should Be in the Post-Mythos Era
AI is shrinking the time between vulnerability disclosure and exploitation, leaving defenders less time to wait for patches or public exploits. Picus Security explains how exploitability validation, security control testing, and autonomous pentesting can help teams close exposure gaps before attacke
Non-Zero-Day VPN Flaw Left Japan ‘s Government Shared Network Platform Exposed: 246,000 Records at Risk
Japan ‘s Digital Agency disclosed a VPN breach exposing 246,000 government employee records across 23 ministries. Detected June 25, publicly disclosed September 11. Japan ‘s Digital Agency disclosed that attackers exploited a vulnerability in a VPN device to
The latest AI doomsayer is China’s intelligence boss
China’s minister for State Security has decided AI might be bad for the nation’s ruling Communist Party. Party secretary and minister Chen Yixin’s views appeared in China Cyberspace Magazine, the flagship publication of China’s Cyberspace Administration (and which readers may recall once carried a p
The next phase of India’s digital payments dominance: Trusted AI-led agentic commerce, Visa’s Sethi says
India’s digital payments ecosystem is a “showcase for the world”. The infrastructure is ready to take the next leap: agentic commerce, where AI agents will make decisions and payments. For that to happen, however, trust is non-negotiable, and it has to be emb
Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation
An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges.
Cisco patches Secure Email Gateway zero-day exploited in attacks
Cisco warned customers to patch a critical Secure Email Gateway zero-day security flaw that threat actors have been exploiting in attacks.
brook v20270101
Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.
Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries
A Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnerability in Gitea to compromise internet-facing instances as part of a multi-national campaign. "Red Heron scanned 1,386 Gitea instances across seven countries and maintai
Peru Economy Ministry’s X account hacked by crypto scammers promoting fake token
The hack highlights the growing vulnerability of government social media accounts, undermining public trust and exposing citizens to scams.