💀 How to Execute a DNS Cache Poisoning Attack: Between Entropy and Post-Quantum In this article we bring the phenomenon of the DNS Poisoning Attack into the laboratory, controlling the variables, reducing entropy, analyzing the behavior of the resolver; all to understand quantitatively why the […]

🔥 How to attack Large Language Models using Poetry What is poetry to you? For many, it is a vehicle for emotion, imagination, and reflection. Yet poetry can also play an unexpected role in the context of Artificial Intelligence (AI). What if we told you that poetry can be used to attack Large […]

[🇮🇹 ]😈 Il ransomware Lynx Lynx si diffonde attraverso molteplici vettori di attacco e, una volta ottenuto l’accesso al sistema, procede a cifrare i file utilizzando l’algoritmo AES, lasciando intatti solo quelli di sistema. Una peculiarità che lo distingue da […] [Original post on mastodon.social]

💣 Q-Day: Why Current Cryptography Is Not Ready for a Quantum Adversary The evolution of quantum computing poses a direct threat to the cryptographic algorithms most widely used today. Schemes such as RSA and Diffie-Hellman, which form the backbone of modern communications security, were not […]

🔎 Chain-Of-Thoughts Hijacking against Reasoning Models Large Reasoning Models are a class of artificial intelligence systems designed to solve complex problems by combining natural language understanding with explicit logical reasoning. The new introduced attack is named Chain-of-Thought […]

💀 Threat Hunting Cobalt Strike The Final Guide: From the Depths of Beaconing to C2 Infrastructure A tool that needs no introduction, widely favored by threat actors and extensively scrutinized by defenders. After years of observing and analyzing real-world compromises, the time has come to […]

💀 Threat Hunting su Cobalt Strike: dalle viscere del beaconing all’infrastruttura C2 Un tool che non ha bisogno di presentazioni, ampiamente utilizzato dai threat actor e costantemente analizzato dai difensori. Dopo anni passati ad osservare e analizzare compromissioni reali, è arrivato il […]

Today’s Daily Term is online. Can you guess the cybersecurity word of the day with 6 attempts 👀? ⬜️⬜️🟩⬜️⬜️ 🟩🟩🟩🟩🟩 👉 https://8bitsecurity.com/daily-term/

💣 Starting today, the Daily Term is live! A daily challenge designed for cybersecurity enthusiasts, professionals, and students: > One term per day. > Six attempts. > No registration required. A simple way to keep your technical vocabulary sharp and learn […] [Original post on mastodon.social]

🔎 A New Phishing Kit based on AI and able to generate custom campaigns The phishing-related cybercrime landscape has undergone a significant transformation with the emergence of automated kits that integrate artificial intelligence components. Among these, InboxPrime AI stands out as a highly […]

We’ve built Daily Term: a daily cybersecurity word challenge. One term per day. Six tries. No sign-up. Try today’s challenge: 👉 https://8bitsecurity.com/daily-term/

🔥 Malware Analysis: A Practical Guide to Dynamic Analysis of Linux ELF Malware Basic dynamic analysis of an ELF executable (Linux) consists of running the file in a controlled and secure environment (such as a sandbox or a virtual machine) in order to observe its actual behavior at runtime […]

💣 Chain-Of-Thoughts Hijacking: un nuovo attacco di Jailbreak contro Large Reasoning Models I Large Reasoning Model sono modelli di Intelligenza Artificiale progettati per risolvere problemi complessi combinando la comprensione del linguaggio naturale con il ragionamento logico. In un recente […]

🔥 How Call and SMS Spoofing Works - and Why It Is So Easy From fake bank messages urging you to "verify a payment" to calls that appear to originate from customer support, telephone spoofing exploits one of the oldest and least secure infrastructures in our communication ecosystem: the […]

🔥 Securing Wi-Fi Cameras: Technical Guide and Best Practices Are you sure you've secured your IoT devices properly, or will you be among the victims featured in the next sensational article written by someone who thinks they've just discovered the existence of Shodan? If you're not completely […]

💀 Un Nuovo Phishing Kit utilizza l’AI Per Generare Campagne di Phishing Totalmente Personalizzate e Diversificate InboxPrime AI, osservato per la prima volta nell’ottobre 2025 dai ricercatori di AbnormalAI, è un kit di phishing facilmente accessibile nei circuiti underground, che viene […]

💣 Why you should not use ChatGPT Atlas, the new OpenAI’s browser ChatGPT Atlas is OpenAI's newly released AI browser, which represent a new generation of web browsers powered by AI models that can understand intent, interpret context, and take action on behalf of the user. Unlike traditional […]

💣 Malware Analysis: Reverse Engineering di un file ELF (linux) L'analisi di malware ELF, tipicamente mirato a sistemi Linux, rappresenta una sfida complessa a causa delle sofisticate tecniche di offuscamento e anti-analisi impiegate dagli attaccanti. In questo articolo esploriamo nel dettaglio […]

🔎 Come Funziona lo Spoofing di Chiamate e SMS e Perché è così Semplice Dai finti messaggi delle banche che invitano a “verificare un pagamento” alle chiamate che sembrano arrivare dall’assistenza clienti, lo Spoofing telefonico sfrutta una delle infrastrutture più antiche e meno sicure del […]

🔥 Why VPN Is Not The Ultimate Solution For Online Security VPNs are often marketed as the ultimate solution for online privacy and security. However, that's not entirely true: while VPNs can offer some advantages, they are far from a universal remedy, and can even be a weakness point for […]

🔎 Perché non dovresti usare ChatGPT Atlas, il nuovo browser di Open AI ChatGPT Atlas è il nuovo browser basato su Intelligenza Artificiale (IA) di OpenAI. A differenza dei browser tradizionali, i browser IA possono riassumere le pagine web, consigliare contenuti correlati e utilizzare le […]

💀 Top 5 Dark Web Engines in 2025 The depths of the web, where anonymity reigns, often spark the curiosity of internet users. But beyond curiosity, there are solid reasons why one might need to navigate this world. This is especially true for cybersecurity professionals, particularly in threat […]

🔥 Malware Analysis: Guida all’Analisi Dinamica di un Malware Linux (ELF) In questo secondo articolo sulla malware analysis, mostriamo passo passo come effettuare l'analisi dinamica di un eseguibile ELF. Si monitorano interazioni con il sistema, attività di rete e modifiche al file system […]

💀 Threat Hunting: Funzioni Utili per Rilevare Stringhe Random L'identificazione di minacce informatiche si basa sugli Indicator of Compromise (IoC), ma questi sono facilmente eludibili dagli attaccanti. Per affrontare questo problema, si ricorre agli indicatori comportamentali come l'entropia […]

🔥 Come Mettere in Sicurezza le Telecamere Wi-Fi: guida tecnica e buone pratiche Hai riempito la tua casa di dispositivi IoT, ma sei sicuro di averli messi in sicurezza, o sarai tra le vittime che finiranno nel prossimo articolo di giornale che parla di Shodan? In questo articolo forniamo una […]

💣 Top 5 Credential Leak Channels on Telegram in 2025 Telegram has become one of the main platforms used by cybercriminals for the distribution of stolen credentials. Monitoring these channels is essential for those working in cybersecurity and threat intelligence. The information shared can […]

🔎 Data Voids: How to Turn Microsoft CoPilot LLM in a Malware Spreading Vector What happens if an attacker manages to exploit the trust that a user (or a system) places in CoPilot to instruct a malicious behavior disguised as a legitimate function? This is precisely the goal of the research […]

💀 Votazione su “Chat Control 2.0” rinviata, e adesso? Il 14 ottobre, la discussione sulla proposta "Chat Control 2.0" dell'Unione Europea è stata rinviata a dicembre 2025 per mancanza di maggioranza qualificata. La proposta prevede un sistema di sorveglianza di massa per combattere gli abusi su […]

💀 How To Find Out If Data From Your Organization Are In The Dark Web Is there anything more frightening than discovering your company's data has ended up on the Dark Web? Probably not, at least for those working in cybersecurity. Understanding the technical and behavioral indicators that […]

[🇮🇹 ] Come Scoprire se la tua Organizzazione è nel Dark Web Comprendere quali sono gli indicatori tecnici e comportamentali che suggeriscono che un data leak sia stato pubblicato o messo in vendita è oggi una competenza cruciale per i team di sicurezza […] [Original post on mastodon.social]

😈 How to Compromise an Air-Gapped System? Air-gapped systems, being physically isolated from the internet, often run outdated software. To install or update applications on these machines, operators may resort to using removable devices such as USB drives It […] [Original post on mastodon.social]

🚀 È online il gruppo Telegram ufficiale di 8BitSecurity! L’idea è semplice: creare una community di persone appassionate di cybersecurity, un luogo più diretto e informale dove condividere in tempo reale aggiornamenti, notizie e qualsiasi curiosità che possa venerci/venirvi in mente! 👉 […]

🚀 È online il gruppo Telegram ufficiale di 8BitSecurity! L’idea è semplice: creare una community di persone appassionate di cybersecurity, un luogo più diretto e informale dove condividere in tempo reale aggiornamenti, notizie e qualsiasi curiosità che possa venerci/venirvi in mente! 👉 […]

[🇮🇹 ] Il 14 ottobre l’Unione Europea voterà sulla proposta “Chat Control 2.0”. Dietro la lotta agli abusi su minori, si cela l’istituzione di un sistema di sorveglianza di massa che andrebbe ad eliminare completamente la privacy di tutti i cittadini europei 🔗 […]

[🇮🇹 ] 😈 Top 5 Tecniche per Monitorare il Dark Web e Raccogliere e Automatizzare Intelligence (OSINT) 5 tecniche pratiche per monitorare il Dark Web, con esempi concreti di strumenti, piccoli script e pipeline di automazione. L’obiettivo non è “navigare per […] [Original post on mastodon.social]

🕵 What is Cross-Site Scripting (XSS)? Cross-Site Scripting (XSS) is a client-side code injection attack. The attacker seeks to execute malicious scripts within the victim’s browser by embedding harmful code into a legitimate web page or web application The […] [Original post on mastodon.social]

😈 Vibe Hacking: how hackers leverage Claude for cyberattacks Claude AI has become one of the most widely known and used models worldwide. Despite AI companies are constantly working on improving the safety and security of models to prevent misuse […] [Original post on mastodon.social]

🔎 How to Scrape Telegram for CTI and SOC activities An encrypted and decentralized communication platform like Telegram is ideal for coordination, exchanging attack tools, sharing information on zero-day vulnerabilities, and even selling stolen data For a SOC […] [Original post on mastodon.social]

Buffer Overflow Attack A buffer overflow is a vulnerability that occurs when a program writes more data into a buffer than it can hold, thereby exceeding its allocated memory boundaries. This behavior may result in the overwriting of adjacent memory areas […] [Original post on mastodon.social]

🔎 Google Vulnerability that allows to delete pages from Google Search In the cybersecurity scenarios we usually encounter, we would hardly take into consideration SEO and Google’s search results. But if a malicious actor had the ability to remove from the […] [Original post on mastodon.social]

🔍 🛡️ What is ARP Poisoning and how does it work? ARP poisoning is a cyber attack that exploits the ARP (Address Resolution Protocol) to manipulate communications within a local network. 🎯 Save the post to have it handy at all times! 🔗 […] [Original post on mastodon.social]

🤖🦠 Despite their growing popularity, LLMs have several vulnerabilities that can be exploited by malicious users for illicit purposes. As of 2023, OWASP started ranking the major risks associated with the use of LLMs. In 2025, Prompt Injection attacks were identified as the most significant […]

🔝 Top 5 Malware Sold on the Dark Web in 2025: What They Are and How Much They Cost The malware market is growing, with offerings that are increasingly accessible even to those with minimal skills. Some even operate as subscription-based services. Here are […] [Original post on mastodon.social]

👾 🔥 DDoS-as-a-Service: Buying a DDoS Attack on Telegram for Just a Few Dollars DDoS attacks are on the rise thanks to DDoS-for-hire services available on the dark web and Telegram. These attacks use botnets to overwhelm services and can target any device […] [Original post on mastodon.social]

😈 🔎 How to Extract Passwords from Windows with Volatility Forensics Volatility in Digital Forensics: how to use the framework to analyze memory dumps from Windows systems, perform forensic RAM analysis, and examine active connections, running processes […] [Original post on mastodon.social]

Top 10 Must Know OSINT Tools for Cybersecurity in 2025 A list of the top 10 Open Source Intelligence (OSINT) tools for cybersecurity. Let’s explore the essential tools for collecting and analyzing OSINT data in intelligence activities, aimed at understanding […] [Original post on mastodon.social]

🔝 5 Essential Tools for Malware Analysis In the world of cybersecurity, malware analysis is a critical challenge to ensure the security of networks and computer systems. This article presents five often-overlooked but essential tools for analysts and […] [Original post on mastodon.social]

🔎 😈 Creating a Secure Environment for Malware Analysis: from Sandboxes to Internet Simulation In this article, we’ll cover how to create a virtual machine using VirtualBox, install Flare-VM, use Remnux as a Linux distribution for malware analysis, and […] [Original post on mastodon.social]

📱 ✉️ 𝗤𝘂𝗶𝘀𝗵𝗶𝗻𝗴: 𝗣𝗵𝗶𝘀𝗵𝗶𝗻𝗴 𝗗𝗲𝗹𝗶𝘃𝗲𝗿𝗲𝗱 𝘃𝗶𝗮 𝗤𝗥 𝗖𝗼𝗱𝗲𝘀 An increasingly common cyber threat, executed in three simple steps: The attacker sends a spam message containing a disguised QR code. The user scans the code using their smartphone, a device typically less […] [Original post on mastodon.social]