Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan

2026-07-28 • StepSecurity • Varun Sharma • js.jadesnow Open article on Malpedia

Joyfill npm Packages Compromised with Blockchain C2 Loader

2026-07-29 • SafeDep • SafeDep Team • js.jadesnow Open article on Malpedia

Linux Malware 1337_GWTK Server Analysis

2026-07-30 • Prtheus • elf.1337_gtwk_rootkit Open article on Malpedia

Beast of Reincarnation geleakt: Piraten zocken Game Freaks RPG schon drei Tage vor Release

Beast of Reincarnation geleakt: Game Freaks RPG ist schon drei Tage vor Release bei Piraten spielbar. Der Ursprung des Leaks bleibt unklar.

I am a beginner trying to start the dns service but this happend I already Uncommented service bind adress and set default dns ip to remnux ip. Did I made any mistakes? Should I reinsall remnux?

submitted by /u/OtherWorldlyFly [link] [comments]

Using Garlic to analyze Android's VM protection

garlic now can analysis android elf. Extract android all aarch64 elf's cfg/exports/imports/strings/dissembly at same time.

Bored and curious. Who are some goated exploit developers/researchers. And what makes someone an exceptional and skilled exploit dev and researchers. And who would you guys put as your top 3 exploit devs

submitted by /u/Zhangash [link] [comments]

Best way to move from web/network pentesting into low-level bug hunting? (ADHD, keep losing steam)

I work as a pentester, so my day-to-day is network and appsec.

Bargeldobergrenze 2027: 10.000-Euro-Limit kommt – aber nicht für alle

Bargeldobergrenze 2027: Ab Juli gilt das 10.000-Euro-Limit für gewerbliche Barzahlungen. Was ist für Händler und Privatpersonen zu beachten?

GEEKOM IT13 Max im Test – schwarzer NUC für Proxmox und lokale KI

Der GEEKOM IT13 Max im Test mit Proxmox, Quick Sync, IPFire und lokaler KI. Dazu gibt es eine klare Barebone-Empfehlung.

C for offensive security !!

Hi, i am going to start my journey as a exploit developer and, i get lot more recommendation on my previous post to learn about system language C…

GitHub - Jatinkapilaq1/intel-me-research: Talk to your Intel Management Engine directly — zero-dependency Python tool. Finds memory leaks, partition manifest, live MKHI probing. First public HECI Spy.

submitted by /u/Frequent-Ad-9633 [link] [comments]

AMA Today: Yuhang Wu (Ex-Tesla & TikTok) Red Team Engineer & Exploit Developer

Don't miss the AMA with Yuhang Wu, where we learn about elite enterprise infrastructure hacking, Linux kernel exploitation, and the future of…

Nyaa: Mutmaßlicher Seeder in Japan verhaftet – jetzt wird es eng

Nyaa gerät unter Druck: Japan verhaftet einen mutmaßlichen Seeder. Die Behörden nehmen damit die Quellen von Torrent-Piraterie ins Visier.

Streamflix Reborn Zwei ist mit unsicherem Konstrukt wieder da

Nach der GitHub-Sperre ist Streamflix Reborn unter einem neuen Konto zurück. So funktionieren Download, Updates und SerienStream wieder.

This month in security with Tony Anscombe – July 2026 edition

OpenAI models going rogue, the first documented agentic ransomware operation, and an emergent AI-driven supply chain threat made for a packed July…

Network Anomaly Detection in KATA

An analysis of how Network Anomaly Detection (NAD) rules work within Kaspersky Anti Targeted Attack, using Kerberoasting and DNS tunneling attacks as…

Android Cracks – aktive Portale im Juli 2026

Schon vor Jahren entdeckte man schädliche Android Cracks im Internet, doch sie sind weiterhin sehr beliebt! Hier unser aktuelles Update.

I am beginner and i have interest in exploit development path :)

I am total confused to where to start learning the exploit development stuff, because i have read the "Hacking : The art of exploitation" but it…

I wrote a beginner-friendly guide explaining what malware actually is

submitted by /u/Scared_Performer9546 [link] [comments]

I open-sourced CyvoraX Suite, a Java-based web security workbench. I'd appreciate technical feedback.

Hi everyone, I've been working on an open-source desktop application called CyvoraX Suite and recently released the latest version.

Modular Features

Serienstream Seiten im Juli 2026

Welche Serienstream Seiten existieren noch? Und wer ist schon wieder weg vom Fenster? Welche Gefahren eigentlich den Besuchern der Portale?

TikTok illegaler Handel: Wird die Videoplattform zum neuen Darknet?

TikTok illegaler Handel: Recherche deckt Werbung für Falschgeld, Drogen und Medikamente auf.

Delivered LNK leads to DARTHVADER Stealer abusing LOLBins and AutoIt

submitted by /u/rifteyy_ [link] [comments]

A StealC backend I reported in April still exposes its documented malware routes after Operation Endgame

In April, I analyzed a StealC v2 campaign distributed through 19 GitHub typosquat repositories.

Kanada: Ein Unterstrich brachte Kik-Nutzer 18 Monate Gefängnis ein

Ein Mann aus Kanada wählte ein Pseudonym von Skyrim. Er wurde trotz fehlender Beweise verurteilt. Die Anfrage betraf eine andere Person.

Analyzing a Spyrix/CleverControl dropper,can't extract payload, confused about PUA vs malware classification

submitted by /u/Either-Particular567 [link] [comments]

5 months of undetected JXA backdoor on macOS. signature scanners found nothing, manual persistence check found it in 10 seconds

Background: developer, cybersecurity basics but not a security professional. Working on a M Chip Mac.

OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia

Our experts discovered OctLurk and SilkLurk, backdoors operating primarily in memory, targeting Central Asia.

Beyond the screenshot: Why you should verify what you see

The screenshot may look convincing, but it doesn’t necessarily prove that the payment, booking or conversation is genuine

Toy Ghouls’ new toy: the GenieLocker ransomware

Kaspersky experts dissect GenieLocker: new custom ransomware variants for Windows, Linux, and ESXi systems.

Pavel Durov: Russland beschuldigt Telegram-Gründer der Terror-Beihilfe

Pavel Durov steht im Fokus Russlands: Der Telegram-Gründer wird der Terror-Beihilfe beschuldigt. Moskau erlässt internationalen Haftbefehl.

Exploiting the order of operations (Pwnable)

Have you ever wondering if the order of operations when voilated can lead to a vulnerability? Maybe the thought never crossed your mind?

Live-Streams Sport im Juli 2026

Live-Streams Sport: Wo kann man sich Fußball oder andere Sportevents online anschauen? Es gab wieder viel Bewegung, einige sind nun offline.

What's the most common reason you rerun the same sample in a sandbox?

Hey guys! Today I caught myself wondering whether I should rerun a sample in a sandbox with a different VM configuration.