Buffer overflow vulnerabilities have driven remote code execution for decades and keep appearing in critical network ...

Abstract: Developing a remote exploit is not easy. It requires a comprehensive understanding of a vulnerability and delicate techniques to bypass defense mechanisms. As a result, attackers may prefer ...

A fake CAPTCHA scam is tricking Windows users into running PowerShell commands that install StealC malware and steal passwords, crypto wallets, and more. A new social engineering campaign is abusing ...

A China-linked threat actor known as Lotus Blossom has been attributed with medium confidence to the recently discovered compromise of the infrastructure hosting Notepad++. The attack enabled the ...

IntroductionIn May 2025, Zscaler ThreatLabz discovered CVE-2025-50165, a critical remote code execution (RCE) vulnerability with a CVSS score of 9.8 that impacts the Windows Graphics Component. The ...

In this blogpost, ESET researchers provide an analysis of Spellbinder, a lateral movement tool for performing adversary-in-the-middle attacks, used by the China-aligned threat actor that we have named ...

For most websites, the homepage represents your brand’s first interaction with your audience on your website. As the catch-all landing page where people will be sent by default, your homepage needs to ...

How often have you asked someone, “Isn’t that ironic?” While ironic is used to describe certain situations, many times, it’s actually misused and misunderstood. To start off, it’s important to know ...

In addition to being one of the most fun words to say—and hardest to spell—in English, “onomatopoeia” probably calls to mind a whole bunch of silly, fun words. Onomatopoeia is the process of creating ...

Bullying is a form of aggressive, potentially violent behavior. Bullying can occur at school, online, in the workplace, or at home. It can also be grounded in prejudice. Bullying is an aggressive ...

BLACK HAT ASIA – Singapore – Windows fibers, little-known components of Windows OS, represent a largely undocumented code-execution pathway that exists exclusively in user mode — and is therefore ...