How is the Android malware stopping you from clicking the uninstall button? Why does it still run after you kill the app?

Introduction

Security Information and Event Management — better known as SIEM — is one of the most critical systems in modern cybersecurity. It…

JSON Web Tokens (JWT)

Last month I discovered a vulnerability in a private healthcare program that rewarded me $$$$ through their bug bounty program.

Cybersecurity researchers at Veracode reveal a typosquatting attack that disguises Pulsar RAT as images to bypass Windows security and antivirus programs.

Modern applications love WebSockets.

This website has an insecure CORS configuration in that it trusts all origins.

Coupon code exploitation !!

Modern applications love WebSockets.

A hidden tracking endpoint trusts HTTP headers it should never trust: here’s how to exploit it

Sistemin Kuralını Değiştirin: Hacker Mantığı ile Kuralları Yeniden Yazma Sanatı --- Kodun Ötesindeki Dil Günümüzün dijitalleşmiş dünyasında “hacker” kelimesi, genellikle …

Here is our challenge where we have to use ROP vulnerability as mentioned in the description. We can start the instance and download the…

Here I use the challenge from PicoCTF

A newly disclosed data breach impacting more than 16 million accounts has placed PayPal back under intense scrutiny, sending ripples across…

If you find value in my cybersecurity writing, you can support my work here:

From college workshops to investigating continent-wide ATM malware operations, Rahul Tyagi has lived the full spectrum of cybersecurity.

What is Cybersecurity? A Beginner’s Guide

Siber güvenlik yolculuğuna ilk başladığımızda hepimiz heyecanla o meşhur araçları kuruyoruz: Nmap, Metasploit, Burp Suite… Kabul edelim, bu…

Modern applications rely heavily on APIs for tasks like authentication, data exchange, and system integration. However, when input…