Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
CVE-2026-87902: how close is your WordPress to remote code execution?
WordPress 7.1.2 fixes an unauthenticated file inclusion bug active since version 4.7, patchable but exploitable into remote code execution. WordPress 7.1.2 shipped on September 22 address an unauthenticated local file inclusion, tracked as CVE-2026-87902 (CVS
Oihk-pentesting
Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.
Critical F5 BIG-IP Vulnerability Exploited as Zero-Day
Unauthenticated attackers could send malicious traffic to BIG-IP to achieve remote code execution.
A look at AI doomsday scenarios that researchers say could put humanity at risk
AI researchers are debating whether increasingly powerful systems could pose existential risks, from enabling bioweapons and cyberattacks to triggering nuclear conflict or acting beyond human control. While some industry leaders warn of catastrophic scenarios
Jev in 25 Lines of Python
Everyone and their mom is talking about Jev. Jev this, Jev that. Everyone on Twitter is all over Jev, how it's the next frontier of large language models and the AI paradigm. We dont really think so.
Synechron initiates stake-sale talks with PE investors; valuation talks still evolving
Synechron, which has crossed $1 billion in revenue, could seek a valuation of $3 billion-3.5 billion or more, the people said. Multiples on revenue are currently around 1.5-2.5, but for larger globa
Microsoft: September Windows updates break Always On VPN connections
Microsoft warned that the September 2026 security updates may also break Always On VPN connections on some Windows 11 systems.
Au cœur de l'entreprise secrète de cyberarmes qui a conquis l'élite du renseignement israélien (Anglais)
The system was being used without an adequate legal basis, in violation of privacy rules. Unpublished documents show that in May 2025, Italy’s Data Protection Authority asked the Interior Ministry to suspend it
When Outsourced Link Building Makes Sense—and When It Does Not
Link building remains one of the least straightforward parts of search engine optimization. Creating a useful page is largely under a company’s control; earning reputable sites’ attention is not. It requires research, prospecting, editorial judgment, outreach
ShinyHunters Claims FBI Hack, Demands Retraction of Threat Report
The cybercrime group is unhappy with its description in an FBI report and threatens to leak stolen information.
vamp-subdomain-takeover added to PyPI
Subdomain Takeover Vulnerability Scanner VampSecure Labs Overview vamp-subdomain-takeover detects subdomain takeover vulnerabilities by performing full CNAME chain resolution and comparing dangling
vamp-darkweb-intel added to PyPI
Overview vamp-darkweb-intel is a threat intelligence and darkweb research CLI that queries a target (domain, IP, hash, or URL) across multiple public feeds in parallel and automatically correlates s