CuraSec

Tags

5g (2)

5g-Security (1)

Access-Control (5)

Account-Hijacking (1)

Account-Takeover (4)

Acsc (1)

Active-Directory (5)

Active-Exploitation (42)

Active-Incident (1)

Adcs (1)

Admin-Controls (1)

Adobe-Commerce (1)

Adversarial-Ai (1)

Adversarial-Ml (4)

Adversary-in-the-Middle (1)

Affiliate-Model (1)

Agentic-Security (1)

Agentic-Threats (1)

Ai (2)

Ai-Access-Control (1)

Ai-Agent-Security (1)

Ai-Assistant (1)

Ai-Assistants (1)

Ai-Assisted-Attack (2)

Ai-Assisted-Attacks (1)

Ai-Assisted-Exploit (2)

Ai-Coding-Agents (2)

Ai-Coding-Tools (2)

Ai-Credentials (1)

Ai-Cryptanalysis (1)

Ai-Detection (2)

Ai-Enhanced-Threats (1)

Ai-Evaluation (1)

Ai-Exploitation (1)

Ai-Governance (4)

Ai-Inference (1)

Ai-Infrastructure (3)

Ai-Ml-Security (2)

Ai-Offensive (1)

Ai-Phishing (1)

Ai-Security (64)

Ai-Services (1)

Ai-Supply-Chain (2)

Ai-Watermarking (1)

Aitm (4)

Amos (1)

Android-Botnet (1)

Android-Iot (1)

Android-Malware (6)

Android-Rat (1)

Anomaly-Detection (2)

Apache-Tomcat (1)

Apache-Traffic-Server (1)

Api-Key-Theft (1)

Api-Security (3)

Api-Vulnerability (1)

Apn (1)

Appsec-Tooling (2)

Apt (12)

Architecture (1)

Arm-Security (1)

Artifactory (3)

Atm-Jackpotting (1)

Attack-Automation (1)

Attack-Graphs (1)

Attack-Simulation (1)

Attack-Surface (1)

Attacker-Capability (1)

Attestation (1)

Attribution (1)

Audit-Scope (1)

Aurora-Ransomware (1)

Auth-Bypass (3)

Authentication (3)

Authentication-Bypass (11)

Authorization (3)

Authorization-Bypass (1)

Autonomous-Agents (1)

Availability (4)

Aws (1)

Azure-Devops (1)

Backdoor-Attack (1)

Banking-Malware (1)

Banking-Trojan (2)

Bec (1)

Benchmark-Integrity (1)

Benchmarking (1)

Bgp-Hijacking (1)

Blockchain-C2 (1)

Bmc (1)

Botnet-Takedown (1)

Breach-Notification (1)

Browser-Exploitation (1)

Browser-Extension (6)

Browser-Extensions (5)

Browser-Rce (1)

Browser-Security (3)

Build-Security (1)

Bulletproof-Hosting (1)

Business-Email-Compromise (1)

C2 (5)

C2-Analysis (1)

C2-Framework (1)

C2-Infrastructure (2)

Camera-Exploitation (1)

Carding-Fraud (1)

Cdn (1)

Cellular-Iot (1)

Cellular-Network (1)

Check-Point (3)

Chinese-Apt (1)

Cicd-Security (1)

Cisa-Advisory (1)

Cisco-Ios-Xr (2)

Citrix-Netscaler (2)

Client-Side (1)

Client-Side-Bypass (1)

Clipboard-Hijacking (1)

Clop (2)

Clop-Ransomware (2)

Cloud-Credentials (2)

Cloud-Native (1)

Cloud-Outage (1)

Cloud-Provider (1)

Cloud-Security (10)

Cloudflare-Workers (1)

Cms (1)

Code-Execution (3)

Code-Injection (2)

Code-Review (1)

Code-Signing (1)

Collaboration-Security (1)

Collaboration-Tools (1)

Command-Injection (4)

Confidential-Computing (3)

Configuration (1)

Container-Security (1)

Content-Integrity (2)

Context-Exfiltration (1)

Cpu-Vulnerability (1)

Cra-Compliance (1)

Credential-Abuse (1)

Credential-Access (1)

Credential-Attack (2)

Credential-Compromise (4)

Credential-Exposure (7)

Credential-Harvesting (1)

Credential-Leak (1)

Credential-Stuffing (2)

Credential-Theft (25)

Criminal-Justice (1)

Criminal-Prosecution (2)

Criminal-Sentencing (2)

Critical-Cve (4)

Critical-Infrastructure (13)

Critical-Vulnerability (6)

Crypto-Theft (2)

Crypto-Wallet (1)

Cryptocurrency (3)

Cryptography (27)

Cryptominer (1)

Cryptomining (2)

Cryptowallet (1)

Css-Injection (1)

Cti (1)

Cumulative-Update (1)

Curl (1)

Customer-Data (1)

Cve (29)

Cve-2023-49105 (1)

Cve-2024-3094 (1)

Cve-2026-17583 (1)

Cve-Process (1)

Cve-Quality (1)

Cvss (1)

Cyber-Espionage (1)

Dark-Caracal (1)

Data-Breach (43)

Data-Exfiltration (6)

Data-Exposure (3)

Data-Integrity (1)

Data-Privacy (1)

Data-Scraping (1)

Data-Streams (1)

Ddos (5)

Deauth-Attack (1)

Deception-Technology (1)

Defense-Effectiveness (1)

Defense-in-Depth (1)

Defi (2)

Dell (2)

Denial-of-Service (4)

Dependency-Management (4)

Detection-Engineering (5)

Detection-Evasion (1)

Detection-Research (2)

Developer-Platform (1)

Developer-Security (1)

Developer-Tools (5)

Diagnostics (1)

Differential-Privacy (2)

Digital-Signatures (1)

Disk-Encryption (1)

Distributed-Systems (1)

Dll-Sideloading (1)

Dns (1)

Dns-Hijacking (2)

Dns-Spoofing (1)

Dns-Tunneling (1)

Domain-Pivoting (1)

Dormant-Malware (1)

Dos-Amplification (1)

Double-Extortion (1)

Dprk (1)

Ebpf (1)

Edge-Appliance (1)

Edge-Appliances (1)

Edge-Devices (1)

Edr-Evasion (2)

Election-Security (1)

Email-Security (5)

Embedded-Security (5)

Embedded-Systems (2)

Employee-Data (1)

End-of-Life (5)

End-of-Support (1)

Endpoint-Detection (1)

Endpoint-Security (3)

Enforcement (1)

Enterprise-Erp (1)

Enterprise-File-Sharing (1)

Enterprise-Risk (1)

Enterprise-Security (1)

Enterprise-Software (2)

Erp (1)

Esu (1)

Evasion-Technique (1)

Exchange-Online (2)

Exchange-Server (1)

Exim (1)

Exploit-Development (2)

Exploit-Kit (1)

Exploit-Synthesis (1)

Exploit-Timelines (1)

Exploitation (3)

Exposed-Infrastructure (1)

Exposure-Measurement (1)

False-Positive (2)

Fault-Injection (1)

Federated-Learning (4)

File-Processing (1)

File-Sharing (2)

File-Upload (1)

Financial-Crime (1)

Financial-Fraud (4)

Financial-Sector (2)

Forensic-Software (1)

Formal-Verification (2)

Fraud-Detection (1)

Frontier-Ai (1)

Ftp (1)

Gatekeeper-Bypass (1)

Geopolitical-Risk (1)

Geopolitics (2)

Github-Actions (1)

Go (1)

Government-Breach (2)

Gpu (1)

Gpu-Security (1)

Graph-Encryption (1)

Grok (1)

Hardware-Backdoor (2)

Hardware-Security (4)

Hardware-Wallet (2)

Healthcare (10)

Healthcare-Breach (1)

Healthcare-Security (1)

Homomorphic-Encryption (5)

Http-Desync (1)

Hugging-Face (3)

Hypervisor-Escape (1)

Iac-Security (1)

Ide-Security (1)

Ide-Vulnerability (1)

Identity-Abuse (1)

Identity-Fraud (1)

Identity-Governance (1)

Identity-Hygiene (1)

Identity-Management (1)

Identity-Persistence (1)

Identity-Security (4)

Identity-Theft (1)

Imds (1)

In-Memory-Malware (1)

Incident-Disclosure (1)

Incident-Report (2)

Incident-Response (10)

Indirect-Prompt-Injection (1)

Industry-Commentary (1)

Industry-Opinion (1)

Influence-Operations (1)

Info-Stealer (2)

Infostealer (19)

Infrastructure (2)

Infrastructure-Security (1)

Initial-Access (5)

Insider-Risk (2)

Insider-Threat (4)

Ios (1)

Ios-Spyware (1)

Iot (2)

Iot-Security (5)

Ipc-Security (1)

Ipmi (1)

Ipv6 (1)

Iranian-Threat-Actor (1)

Jailbreaking (1)

Java (2)

Jwt (1)

Kernel-Level (1)

Kernel-Security (1)

Key-Management (2)

Knowledge-Base (1)

Kvm (3)

Lateral-Movement (1)

Law-Enforcement (13)

Lazarus-Group (1)

Least-Privilege (4)

Lightning-Network (1)

Linux (13)

Linux-Botnet (1)

Linux-Kernel (7)

Linux-Malware (1)

Linux-Rootkit (1)

Llm (6)

Llm-Assisted-Malware (2)

Llm-Hallucination (1)

Llm-Privacy (1)

Llm-Research (1)

Llm-Security (21)

Llm-Supply-Chain (1)

Llm-Tooling (1)

Llm-Watermarking (1)

Load-Balancer (1)

Loader-as-a-Service (1)

Local-Exploit (1)

Local-Privilege-Escalation (1)

Lpe (1)

Machine-Identity (1)

Machine-Learning (9)

Machine-Learning-Security (1)

Macos (18)

Macos-Malware (1)

Macos-Stealer (1)

Malicious-Extensions (2)

Malvertising (4)

Malware-Analysis (4)

Malware-Delivery (1)

Malware-Detection (1)

Malware-Loader (2)

Managed-File-Transfer (1)

Mcp (3)

Mcp-Security (4)

Mcp-Servers (1)

Mechanistic-Interpretability (1)

Medical-Imaging (1)

Memory-Poisoning (2)

Memory-Safety (1)

Mfa (2)

Microkernel (1)

Microsoft-365 (12)

Microsoft-Copilot (1)

Microsoft-Defender (3)

Microsoft-Entra (3)

Microsoft-Graph (1)

Microsoft-Teams (3)

Misconfiguration (2)

Mitre-Attack (1)

Mixture-of-Experts (1)

Ml-Security (1)

Mobile-Banking (1)

Mobile-Malware (1)

Mobile-Security (6)

Mpc (1)

Multi-Tenancy (1)

N8n (1)

Nation-State (6)

Network-Analysis (1)

Network-Attack (1)

Network-Devices (1)

Network-Infrastructure (3)

Network-Scanning (1)

Network-Security (7)

Network-Slicing (1)

Nfc (1)

Non-Human-Identities (1)

North-Korea (2)

Notebook-Vulnerability (1)

Npm (19)

Npm-Supply-Chain (1)

Ntp (1)

Oauth-Abuse (4)

Ofac-Sanctions (2)

Offensive-Security (2)

Open-Source (15)

Open-Source-Security (2)

Open-Source-Tooling (1)

Open-Vswitch (1)

Operational-Disruption (1)

Operational-Technology (2)

Oracle-Database (1)

Oracle-Weblogic (1)

Organizational-Security (1)

Organized-Crime (1)

Oss (1)

Ot-Security (3)

Password-Manager (2)

Password-Spray (1)

Password-Spraying (1)

Patch (16)

Patch-Bypass (2)

Patch-Lifecycle (1)

Patch-Management (13)

Patch-Tuesday (15)

Path-Traversal (2)

Patient-Data (1)

Payment-Security (1)

Pdf-Malware (1)

Pdf-Security (1)

Penetration-Testing (1)

Performance (1)

Persistence (2)

Phishing-as-a-Service (5)

Php (1)

Pii (4)

Pki (1)

Plm (1)

Plm-Security (1)

Plm-Software (1)

Plugin-Vulnerability (2)

Policy-Enforcement (2)

Policy-Framework (1)

Post-Exploitation (4)

Post-Mortem (3)

Post-Quantum (4)

Post-Quantum-Crypto (2)

Pqc (1)

Print-Management (1)

Privacy-Preserving (1)

Privacy-Preserving-Ml (1)

Privilege-Escalation (20)

Process-Accounting (1)

Process-Injection (2)

Progress-Loadmaster (1)

Progress-Software (1)

Prompt-Engineering (1)

Prompt-Injection (25)

Protocol-Security (1)

Public-Exploit (3)

Pypi (1)

Quic (1)

Raas (2)

Rag (1)

Ransomware (47)

Rat (4)

Rat-Malware (1)

Rce (69)

Rdp (1)

Reconnaissance (2)

Red-Teaming (2)

Remote-Access (1)

Remote-Access-Trojan (1)

Remote-Code-Execution (3)

Residential-Proxy (2)

Resource-Abuse (1)

Responsible-Disclosure (2)

Reward-Hacking (1)

Rf-Security (1)

Rhel (1)

Rmm (1)

Rmm-Exploitation (1)

Rmm-Security (1)

Rmm-Software (1)

Rng (1)

Router-Firmware (1)

Router-Security (3)

Ruby-on-Rails (1)

Russian-Apt (4)

Rust (4)

Ryuk (1)

Saas (2)

Saas-Breach (1)

Saas-Security (2)

Saas-Threat (1)

Saml (2)

Sandbox-Escape (7)

Sap (4)

Sase (1)

Scattered-Spider (2)

Sdlc (1)

Secret-Scanning (1)

Secrets-Exposure (2)

Secrets-Management (2)

Secure-Boot (1)

Secure-Code (1)

Secure-Coding (1)

Secure-Design (1)

Secure-Development (1)

Security-Culture (1)

Security-Patterns (1)

Security-Posture (1)

Security-Principles (1)

Security-Research (2)

Security-Testing (1)

Security-Tooling (1)

Self-Hosted-Git (1)

Session-Hijacking (1)

Sfi (1)

Shell-History (1)

Shell-Obfuscation (1)

Shinyhunters (5)

Side-Channel (6)

Siem (2)

Smart-Contracts (4)

Snap (1)

Soc (2)

Soc-Automation (1)

Soc-Operations (1)

Soc2 (1)

Social-Engineering (20)

Speculative-Decoding (1)

Speech-Recognition (1)

Spring-Boot (1)

Sql-Injection (6)

Ssh (1)

Ssrf (2)

Static-Analysis (4)

Stealer-Malware (1)

Steganography (2)

Supply-Chain (125)

Surveillance (2)

Svg-Injection (1)

Synthetic-Data (1)

Tcp-Hijacking (1)

Tee (1)

Third-Party-Breach (2)

Third-Party-Risk (14)

Threat-Actor (24)

Threat-Actors (4)

Threat-Advisory (1)

Threat-Analysis (1)

Threat-Detection (3)

Threat-Hunting (3)

Threat-Infrastructure (1)

Threat-Intel (17)

Threat-Intelligence (6)

Threat-Investigation (1)

Threat-Landscape (1)

Threat-Notification (1)

Threat-Report (1)

Threat-Research (5)

Threat-Scanning (1)

Threshold-Signatures (1)

Tls (3)

Token-Theft (1)

Tool-Poisoning (1)

Traffic-Analysis (1)

Travel-Sector (1)

Traveler-Data (1)

Trojanized-Software (2)

Trust-Signals (1)

Trusted-Computing (1)

Ttp (1)

Typosquatting (1)

Uav (1)

Uefi (1)

Unauthenticated (2)

Unauthenticated-Rce (1)

Usb (1)

Vector-Search (1)

Vendor-Breach (4)

Vendor-Compromise (1)

Vendor-Research (1)

Vendor-Risk (9)

Vendor-Update (1)

Video-Conferencing (2)

Virtualizor (2)

Vision-Language-Models (2)

Vision-Transformer (1)

Vmware-Esxi (1)

Vmware-Vcenter (3)

Vnc (1)

Voip (1)

Vpn (6)

Vpn-Appliance (3)

Vpn-Appliances (1)

Vs-Code-Extension (1)

Vulnerability (19)

Vulnerability-Class (2)

Vulnerability-Detection (1)

Vulnerability-Disclosure (5)

Vulnerability-Discovery (1)

Vulnerability-Management (11)

Vulnerability-Patching (1)

Vulnerability-Research (13)

Vulnerability-Scanning (1)

Watermarking (4)

Web-Application (2)

Web-Frameworks (1)

Web-Security (4)

Web-Skimming (2)

Web3 (1)

Webdav-Malware (1)

Website-Fingerprinting (1)

Website-Hijacking (1)

Weekly-Recap (1)

Windows-Defender (1)

Windows-Driver (1)

Windows-Hardening (2)

Windows-Hello (1)

Windows-Lpe (1)

Windows-Malware (2)

Windows-Server (2)

Windows-Update (1)

Windows-Zero-Day (1)

Wireless-Security (2)

Wmic (1)

Workflow-Automation (2)

Workflow-Injection (1)

Worm (1)

Wsus (2)

Xss (4)

Yara (1)

Zero-Knowledge (1)

Zero-Knowledge-Proofs (1)

Zoom (3)