In a sophisticated new campaign active since late 2025, a mysterious threat actor has been turning the internet’s most basic security tool—the human verification challenge—into a gateway for high-…

SolarWinds. Ivanti. SysAid. ManageEngine. Giants of the KEV world, all of whom have ITSM side-projects.

ITSMs, as a group of solutions, have played pivotal roles in numerous ransomware gang campaigns - not only do they represent code running on a system…

Alongside building Myrad, I still spare weekends on independent security research and this turned out to be one of my best findings, on a…

The first three weeks of March 2026 have been a wake-up call for the global cybersecurity community. Nation-state hacktivism, undetected…

Somewhere between hacking, policies, and reality… things changed

Executive Summary

You don’t need a $10k setup. You need the right five.

Scenario

TL;DR: WhatsApp’s View Once feature is broken — and WhatsApp has decided not to fix it. More troublingly, Meta’s response reveals they have…

Subnetting is the process of dividing a large network into smaller networks called subnets. Why subnetting is important ? .

Gibraltar: Wednesday, 18 March 2026–07:00 CET

Lab →ProfileHub →IDOR in User Profile API So I was poking around a developer networking platform for a security challenge, and stumbled on a pretty juicy bug. Turned out any logged-in user could …

SQL Injection is one of the most critical vulnerabilities in web applications. However, not all SQL Injection flaws are directly visible…

VULNERABILITY ASSESSMENT REPORT STATUS: FINAL REPORT | CLASSIFICATION: CONFIDENTIAL

Simple OSINT steps to solve Missing Person TryHackMe challenge

Link: https://www.vulnhub.com/entry/nully-cybersecurity-1,549/

by Prince Niyonshuti N | Easy | Forensics |browser_webshell_solvable

A Design That Prevents IdP Tokens From Leaving the System — Proposal for an Identity Token Broker (ITB) An IdP token has an inherently dangerous property: once leaked, it allows arbitrary API …

19 signals. per tweet breakdown. runs locally on your machine.