How I built a custom detection engine for the OWASP Top 10 (2025) and learned to bypass false positives.

Roads, Not Roadblocks: Secure Access Without Slowing Users Down

How I’m building a small-scale SOC lab using Wazuh, Zeek to explore alert correlation

Domain 3 (Security Engineering) is one of the largest and most challenging domains in the CISSP certification. Many candidates struggle…

Introduction

Most people think cybersecurity fails because systems are weak.

Every secure system is built on trust.

When I needed to look up a threat actor, I often found myself unsure where to begin.

Hello everyone,

Modern security operations centers rely heavily on detection engineering — building systems that detect attacker behavior and generate…

Disclaimer: The views expressed in this article are my own and do not necessarily reflect the views of my employers, current or past.

Learn how to identify, detect, mitigate and report a vulnerability effectively.

Now Days we can notice that supplychain attack via compromised Third party library packages.Recent Ruby Gems,Mistral AI,Axios npm packages…

I have spent 2.5 years automating privileged account workflows at Deloitte using CyberArk REST API and PowerShell. Every bulk onboarding…

How standardized behavior creates predictable targets — and what to do about it

Does cybersecurity seem confusing? You’re not alone. Let’s break it down step by step and make it easy to understand.

When Anthropic announced Claude Mythos through Project Glasswing, most of the cybersecurity industry focused on one thing:

SQL Injection and Cross-Site Scripting: attack, analyze, and remediate.

Introduction

Threat modeling when the asset you’re protecting is money.