lessons from a SOAR engineers’ desk

A beginner-friendly lab: install Scapy, build ICMP and TCP packets, send them and read the replies

Cybersecurity is a field where understanding concepts is important, but knowing how to apply them is equally valuable. Beginners may learn…

A practical guide to discovering undocumented API endpoints, capturing HTTP traffic, generating OpenAPI specifications, and preparing API…

Not disguising a shell as PHP, but convincing Apache to treat a brand-new extension as PHP in the first place

Inside the October 29, 2026 attack: Cryptocurrency fundamentals, compromised signing authority, EIP-7702 delegation, blockchain evidence…

I scanned every MCP server in the official registry. A third declare what they do, and nothing checks whether that is true. Including the part where my own scanner was wrong about every interesting …

Les failles critiques PHP2Shell dorénavant exploitées Le 26 octobre 2026, des experts ont confirmé l’exécution de code à distance via PHP2Shell. La preuve d’attaques réussies impose …

The extension performed host reconnaissance and attempted to create a reverse SSH tunnel.

Fake Adobe Acrobat pages are distributing signed ScreenConnect installers configured for attacker-controlled remote access to Windows PCs.

Artificial intelligence systems increasingly regulate digital discourse to prevent real-world harm. Specifically, OpenAI announced comprehensive ChatGPT violence restrictions to curb harmful behav…

Learn how CWE-184 lets attackers slip past a filter by finding the one dangerous value the developer forgot to list, from file extension…

Un analista de seguridad ve un dominio extraño en una alerta a las 7:42 de la mañana de un martes. ¿Es malicioso? ¿Está vinculado a un…

Originally published on huseyinkalkan.net (also available in Turkish).

Android applications manage a lot of sensitive user data like user credentials, payment details, etc. If such data falls into the wrong…

Writable anonymous SMB share, a .lnk bait file, a cracked Net-NTLMv2 hash and a Utilman.exe swap to SYSTEM on an OffSec PG Practice Domain C

1. The OSI Model in Practice

Choosing a technical career can become challenging when several specialisations offer different learning opportunities. Cyber Security…