Ethical Hacking Mission Control

This live lab is a safe space for defenders, red teamers, and curious hackers to sharpen their tradecraft using real tooling and real telemetry. Every article, lab module, and intel briefing is curated to help you practice responsible disclosure, grow your skill set, and support the security community.

This is a Vulnerable Lab

Why this lab exists

What vulnerabilities are hidden here

Ethical Hacking Mission Control

FBI arrests another suspected ShinyHunters hacker after agency breach

TP-Link Sued by Four More U.S. States Over Router Security and China Ties

What We Missed: FBI Strikes Back at ShinyHunters

Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto

P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands

Security Threats Don't Stop at the Office: Why Executives' Families Need Training Too

Germany arrests alleged core Qilin ransomware member after extradition

How to keep AI agents within their permissions

Social Engineering AI Agents: The New BEC for 2026

Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access

Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

Max severity SonicWall SMA1000 flaw now exploited in attacks

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

FBI Seizes 7 Domains, Disrupts Flax Typhoon Tools Used in Critical Infrastructure Intrusions

The AI Velocity Paradox: Why Security Is Decades Behind AI Ambition

Man admits to running network of 15,000 money mules for cybercriminals

Microsoft: Outdated Windows devices will stop receiving security updates

GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

Citrix warns admins to patch new NetScaler RCE flaw immediately

Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland

FBI disrupts Chinese hacking tools used to breach critical infrastructure

'AgentCorruption' Puts AWS Environments At Risk With Single Prompt

Ransomware attack disrupts Japan's IDCF Cloud used by govt clients

Low-cost Android phones ship with residential proxy malware

Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting

FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails

Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift

ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories

FakeGit malware campaign returns with 17,610 malicious GitHub repos

Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks

UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML

Cisco warns of critical flaws allowing Nexus switch takeover

ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms

OAuth grants pile up faster than you can review them. Here's how to keep up.

Uranium crypto exchange hacker convicted for stealing $53 million

Microsoft Teams to get support for third-party deepfake detection tools

Writing the Next Chapter

ASOS links data breach to social engineering attack, credential theft

Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases

U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks

MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

Citizen Lab Slams Trump Administration, 'Techno-Fascist' Executives

Australian Gov't Weighs Mandatory AI Incident Reporting

Anthropic Gives Vetted Defenders Fewer Claude Guardrails

OpenAI Agent Escape Causes Wikimedia Service Outage

Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet

ShinyHunters Extorted Boeing Spin-off Prior to Arrests

The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflow

FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials

Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details

What Is Agentic Pentesting? What It Proves, and Where It Stops.

Anthropic Expands Claude Access for Vetted Cyber Teams as Glasswing Finds 129,000 Flaws

100+ Compromised Websites Use Fake Cloudflare Checks to Deliver LunexStealer

ClickFix Attacks Evolve to Better Hide Malicious Payloads

Critical Healthcare Systems Aren't Quantum-Ready

Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Google's PageBreak AI Agent Finds 500 Flaws in Its Web Apps

IANS' Kakolowski: How AI Is Reshaping CISO Budgets &amp; Security Teams

'BigDiskBuster' Leaves Microsoft Defender Running While Blocking Updates

LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings

Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies

Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers

Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports

Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products

FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach

Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account

IANS' Kakolowski: How AI Is Reshaping CISO Budgets & Security Teams

Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response

SWIFT Banking & Government Middleware Enables RCE