I used to think information security was simple.

After gaining initial access to the target as a low-privileged user, the objective was to identify a vulnerability that could be exploited…

Linux is an open-source operating system that controls computer hardware and software, allowing users to run applications, save data, and…

This project is journey into setting up a simulated CCTV system using ZoneMinder on a Kali Linux VM, exploring its vulnerabilities, and…

Not theory. These are the fixes I added after seeing real bugs, leaks, and late-night incidents.

The goal of Crystal Palace (and the Tradecraft Garden) is to separate evasion tradecraft from the capability. This means that a capability (such as a DLL) has no evasion built into it; and that evasion is weaved in at link-time in a manner that the capability…

An Adobe Reader zero-day vulnerability is being actively exploited via malicious PDFs, allowing hackers to steal data without user interaction, with no patch available.

A swipe gesture, a missing cleanup function, and a playlist that forgets itself.

Race conditions are vulnerabilities that many security researchers first encounter in training labs. They are simple to understand, yet…

This is the final part in an 8-part series on rethinking application security from first principles.

Video walkthrough:

No error messages, no data reflection, just a polite “thanks for your message.” Yet with a well-placed sleep command, you can prove…

If you want to get better at pentesting, the fastest way is to stop treating it like theory and start treating it like a craft. The best…

Mosquito Boats. Hacking and GPS Jamming

Artificial intelligence is transforming industries at a rapid pace. However, it is also reshaping cybercrime in ways that many people are…

Last month I was reviewing resumes for an open analyst position on my team and I noticed something that has become a pattern. Out of about…

⚡ A Story of Trust, Dependency… and a Close Call

Learning cybersecurity has probably been one of the most rewarding yet frustrating journeys of my life. I knew it wouldn’t be simple, but I…

When Attackers Lie

The Silent Collapse of Trust