How a single insecure object reference can expose millions of users — and how hunters keep finding it everywhere.

I closed my laptop at 11 PM on a Sunday after six hours of finding nothing. My head hurt. I was refreshing my inbox every ten minutes like…

بسم الله والصلاة والسلام على رسول الله ﷺ❤️، اللهم علِّمنا ما ينفعنا، وانفعنا بما علَّمتنا، وزِدنا علمًا نافعًا

Read Part 1 here — https://blackmambaa.medium.com/how-a-simple-otp-flaw-could-lead-to-full-account-takeover-12220a10a63b

Over the past few years, everyone’s been thinking about what would happen as AI gets smarter.

​The Day the World Stood Still: The WannaCry Ransomware Chronicles ​Introduction: The Unfolding Chaos On May 12, 2017, IT departments across the globe watched in horror as their screens turned …

Learn how to send logs from Linux to a centralized Syslog server or SIEM using Rsyslog — a complete cybersecurity tutorial covering Plain…

Overview

A researcher going by “Nightmare Eclipse” tried to disclose a privilege escalation bug in Windows Defender to Microsoft. According to them…

Summary

Initial Reconnaissance

Date: 20/04/2026

Hello, Mr Anderson. Care to put your prompt injection skills to the test?

In today’s hyper-connected world, cyber threats are evolving at an unprecedented pace. From ransomware attacks to sophisticated phishing…

How an un-sanitized input led to a complete authentication bypass in one of the world’s most popular open-source CRMs.

Introduction

How a “harmless” log file turned into cache poisoning and unexpected data exposure

Bug bounty hunting in 2026 is not about running a scanner and hoping something pops.

Cyber security