Sudah cukup lama sejak saya memutuskan untuk menarik diri dari hiruk-pikuk X (sebelumnya Twitter). Ketidaknyamanan personal terhadap arah…

It has been quite a while since I distanced myself from the noise of X (formerly Twitter). My personal reservations about the platform’s…

TL;DR

Whenever we are in a pentest, there is things we have to take into consideration while infiltrating a machine or exploiting it’s services. there is also different entry points to the target whether …

As a bug bounty hunter, I’ve chased my fair share of vulnerabilities from subtle misconfigurations to complex logic flaws. But discoveries…

Seqrite Labs exposes Operation CamelClone, a global cyber espionage campaign using the HOPPINGANT loader and public cloud services to evade detection.

A whitebox pentest, an exposed .git directory, and an authentication shortcut someone really should not have shipped to production.

Introduction

In bug bounty and real-world pentesting, some vulnerabilities never go out of style.

Introduction to Black Hat Hacking

Description : Learn the main threats and defenses in Entra ID environments and how to detect them.

In this room, we will learn about different ways of bypassing the website authentication. This prevention is really crucial as the bypass…

Introduction

ZeroThreat’s approach to Agentic AI pentesting is built around a simple idea: security testing should validate real risk, not just detect…

LAB52 uncovers the DRILLAPP backdoor, a novel espionage campaign targeting Ukraine that weaponizes Microsoft Edge for screen recording and surveillance.

An 8.6 CVSS Angular XSS vulnerability (CVE-2026-32635) bypasses built-in sanitization via i18n attributes. Patch your web applications immediately.

What is Application Security?
Application Security, as the name suggests, is a security program that directly deals with applications…

I’ve been thinking about compliance lately. A lot. Not in the way most people think about it — not the annual audit, not the checklist, not…

GlassWorm (aka ForceMemo) is a sophisticated, self-propagating supply chain worm that has compromised 151+ GitHub repos, 72+ Open VSX…

Introduction