I’ve been raving about the ‘Applied AI Engineers’ for a wee while, but I was wrong. AI Skills are actually PlatformEngineer’s New Skill…

Open your LinkedIn feed today, and what is the first thing you see? Someone is celebrating a new certificate. “Proud to announce I am CEH…

When the server blocks .php but forgets about .phar, .phtml, and twenty other extensions that do exactly the same thing. Part 3 of the File…

Most people see broken links as a simple website error.

By Rajesh Sudam | TryHackMe: RajeshSudam

TASK 1

I started with an nmap scan and identified a non-standard port hosting a web application.

As enterprises rapidly adopt AI, multi-cloud architectures, and distributed APIs, managing security, governance, and observability across…

TryHackMe’s Jr. Penetration Tester Learning Path was rebuilt in May 2026. I’m so excited to work through the new rooms when there aren’t…

Description : Navigate msfconsole, search for modules, configure exploits, and manage sessions on target systems.

Videos of fifty sessions from CVE/FIRST VulnCon 2026 are now available on the FIRST Channel on YouTube and the CVE Program Channel on…

A working Python implementation that blends C2 traffic with ordinary DNS queries and imgbb uploads

IBM X-Force, Gartner, and TierPoint agree: the threat landscape just changed permanently. Here’s what’s coming — and exactly what to do…

AI is doing a lot, it’s writing and analyzing code, finding vulnerabilities, generating reports and automating tasks and completing them…

I was testing this domain from a program which provides swag. First we have attribute context injection where we can break out using “…

Private Equity and Cybersecurity Growth Cybersecurity has always been a strange business. It is one of the few industries where demand grows because the world becomes more dangerous, more connected …

Welcome to this new Medium post, today we will see another UAC bypass technique through Sysprep.exe approaching the AppID Hijack technique!

You hired someone to assess your security. Now there is a report sitting in your inbox. Here is what to do with it.

A penetration test is not about breaking things. It is about finding out what could break before someone else does.

Introduction

This is the story of one of my recent projects — a keylogger detector built from scratch in C++ using low-level Windows API internals. Not…