The newly uncovered SymJack AI attack technique highlights critical gaps in AI coding agent security. Learn how symlink hijacks exploit developers.

Discover how the GREYVIBE threat actor group leverages AI. WithSecure details this Russia nexus threat group targeting Ukraine.

Welcome to GoGatoZ — a purpose-built Go tool for GitLab CI/CD security auditing that can perform and automate the entire CI/CD kill chain along with everything those one-off scripts did and then some.

Stop Scrolling Through Burp’s HTTP History — Map It Instead use a free Burp Suite extension that turns hundreds of requests into one clear…

By Divakar Vasani

Most users never think twice about the “Sign Out Everywhere” button. They click it, assume every session is gone, and move on.

By Divakar Vasani

Introduction

First of all, Alhamdulillah. Every finding teaches something new, and this one reminded me that sometimes the most critical vulnerabilities…

How standardized behavior creates predictable targets — and what to do about it

Organizations spend millions on tools and platforms. Yet attackers keep winning. The reason isn’t technical ,it never was.

Today, I’m breaking down my solution for the challenge: “A little something to get you started.” This is a web-based challenge rated as…

Firewall Fundamentals

This lab has an unprotected admin panel.

Date: 03/06/2026

The quiet workhorses behind real investigations.

TL;DR: A single unsanitized parameter in a login form can let an attacker walk in as admin — no password needed. Here’s how it works, how…

TA4922, a suspected China aligned cybercrime group, is targeting UK and European organisations with tax, payroll and benefits themed malware campaigns.

It was late on a Friday night, and I was deep-diving into a private bug bounty program for a major B2B SaaS platform. Let’s call the target…