🔍 The Reality Check: Your Firewall Is Talking to AI While You Sleep

In February 2024, Pepco Group’s Hungarian branch lost around €15.5 million in a phishing attack in which fraudulent emails, crafted with…

The rise in hacking incidents is no longer limited to small or unknown platforms today, even the most secure and widely used applications…

Introduction

Course completed. Exam pending.

TryTrainMe’s production code review model is phoning home. Investigate the breach.

Single prompt reveals multiple hidden outputs in a simple challenge

Date: 23/04/2026

How hidden payloads in models affect system trust and behaviour

Summary: In Infinity Shell room how to investigate the PHP wen shell attack and Apache logs, decode base64 format with the Linux…

baaaack, Just pwned Certified which is a Windows Active Directory machine focuses on abusing ACL misconfigurations and ADCS…

For years, cybersecurity was viewed through a narrow lens.

Last week, 139 vulnerabilities were disclosed in 116 WordPress Plugins and 10 WordPress Themes, with contributions from 84 vulnerability…

TL;DR: I fed a JavaScript bundle to Claude Desktop (I use Burp MCP with Claude). It mapped hidden endpoints I’d missed after multiple…

Auditing my own open-source auth platform, two months after shipping v1.0

A self-replicating worm named after a Dune monster just hijacked one of the most trusted tools in security. Here’s what it stole, how it…

Synthetic substances continue to reshape conversations around online drug markets, and few categories illustrate this shift better than…

Difficulty: Easy Room: https://tryhackme.com/room/expose Category: Web / SQLi / File Upload / Privilege Escalation Tools Used: Nmap, WFuzz…

Description : Discover AI infrastructure by scanning ML services, frameworks, and extracting metadata from APIs.

Description : Assess and mitigate enterprise AI/ML risks via systematic, defender-focused auditing.