This article provides an analysis of World Leaks, a new extortion platform that emerged in early 2025, detailing its origins, operational challenges, and collaborations with other threat actors.

Exploitation of multiple vulnerabilities in GLPI to gain remote code execution from unauthenticated privileges.

An OSINT investigation into the world of forged documents business

In this blog post, we describe new techniques to dump PHP files leveraging filters, and a tool that does it.

In this blog post, we will explore how we can exploit CNEXT, but blind, covering the cases where we have a file read primitive, but cannot get the output.

An authentication bypass vulnerability was found on Jupiter X Core Plugin <= 4.7.5 (CVE-2024-7781).