Stryker - Android pentesting app with premium access is now free until 2050
Source: https://www.mobile-hacker.com/2025/06/12/stryker-app-goes-free-the-ultimate-mobile-pentesting-toolkit/
This issue affects systems where KTelnetService and a vulnerable version of Konsole are installed but at least one of the programs telnet, rlogin or ssh is not installed. The vulnerability is in KDE's terminal emulator Konsole. As stated in the [advisory by KDE](https://kde.org/info/security/advisory-20250609-1.txt), Konsole versions < 25.04.2 are vulnerable.
On vulnerable systems remote code execution from a visited website is possible if the user allows loading of certain URL schemes (telnet:
Hi - we are looking for some feedback further to our new document sharing/anti-virus/secure communications website GetSafeDocs.com. We are based in Canada so follow Canadian privacy legislation / bound by Canadian legal standards. The goal of the site is to provide an affordable platform to help folks send documents securely and avoid the pitfalls of email. One of the sites features is it scans documents for any malware and the receiving side can preview the documents in a sandbox before downloa
ISPConfig contains design flaws in the user creation and editing functionality, which allow a client user to escalate their privileges to superadmin. Additionally, the language modification feature enables arbitrary PHP code injection due to improper input validation.
In 2023, During a security assessment of Masa CMS, an open-source content management system.
We discovered 11 vulnerabilities in Masa CMS, some allowing server takeover.
Why does it matter? Because it's easy to assume that "if it's open source, someone must have already reviewed it."
But the truth is:
No one looks until someone really looks.
Now, imagine if these vulnerabilities had been found by a malicious actor instead of a security researcher…
HMAS Canberra accidentally blocks wireless internet and radio services in New Zealand
Source: https://www.rnz.co.nz/news/world/563357/hmas-canberra-accidentally-blocks-wireless-internet-and-radio-services-in-new-zealand
Riding The Time Machine: Journey Through An Old vBulletin PHP Object Injection
Source: https://karmainsecurity.com/riding-the-time-machine-old-vbulletin-php-object-injection
Hi all, I discovered suspicious behavior and possible malware in a file related to the official MicroDicom Viewer installer. I’ve documented everything including hashes, scan results, and my analysis in this public GitHub repository:
[https://github.com/darnas11/MicroDicom-Incident-Report](https://github.com/darnas11/MicroDicom-Incident-Report)
Feedback and insights are very welcome!
We’ve published new research exposing critical vulnerabilities in Anthropic’s Model Context Protocol (MCP). Our findings reveal Full-Schema Poisoning attacks that inject malicious logic into any schema field and Advanced Tool Poisoning techniques that trick LLMs into leaking secrets like SSH keys. These stealthy attacks only trigger in production. Full details and PoC are in the blog.
**TL;DR: Built a mathematical solution that cuts CA compromise response time from months to 2 hours. Just submitted to IETF. Watch them discuss it for 10+ years while dozens more DigiNotars happen.**
# The Problem That Keeps Me Up At Night
Working on a DNS-Security project, I realized something absolutely bonkers:
Nuclear power plants have SCRAM buttons. Airplanes have emergency procedures. The global PKI that secures the entire internet? Nope. If a Root CA gets pwned, we basically call every
