Security should start before the attack — not after.

Introduction:

You didn’t click anything, but the hack has already begun. Inside the new ‘Aladdin’ exploit that turns the ads on your screen into…

Welcome to this new Medium post, in this one I will show you my AES implementation to encrypt all the communications between the…

With many new faces in the coding communtiy, one problem has been appearing more and more. Developers hard-code their secrets (API-Keys…

In the Gospel of Philip, it is inferred that a single object that provides complete protection from all “archon attacks”.

The box is sleek. The device feels surprisingly solid in your hand. You power on your new Flipper Zero and… are greeted by a dolphin. Now…

The recent disclosure of CVE-2025–55182, now widely referred to as React2Shell, represents one of the most consequential security events in…

Hunt through robots.txt, .htaccess, and .DS_Store files to understand forced browsing attacks

Achieving resilience and ensuring data integrity within modern cloud infrastructure demands a shift from reactive security measures to a…

If you work in security, you spend your time in things that are very obviously real: users forgetting passwords, weird processes on a box…

With network access systematically expanded through Lateral Movement, the next critical phase becomes extracting the valuable data that…

Darkweb exit scams are one of the most common — and most financially damaging — risks in the darknet ecosystem. They happen when a…

There’s a persistent communication gap between Cybersecurity, the C-Suite, and the Board.

Selesai ‘menaikan’ Trump kembali ke singgasana Gedung Putih AS, kini Elon Musk beralih ke kontinen Eropa. Apa saja agendanya di Uni Eropa?

Cybersecurity Is Splitting in Two: Here’s Who Survives the AI Takeover

Let’s start with the enumaration processes.

How one breach exposed thousands of repos — The uncovered serious weaknesses in DevOps Security

There’s something strangely comforting about starting small. A blank screen, a half-written script, a command that doesn’t work yet, a log…

EVE-NG, Cisco Routerlar ve Derin Öğrenme (Deep Learning) kullanarak geliştirdiğim gerçek zamanlı anomali tespit sistemi

Investigate web + cloud compromised via PCAP and CloudTrail.