Inside the SlackShell Backdoor — How a Nation-State APT Turned Slack Into a Hidden Command Server

On 10 June 2026 (Patch Tuesday), a security researcher under the alias “Nightmare-Eclipse” (also known as Chaotic/Dead Eclipse) published a…

In this adventure down the dark allies of AWS service abuse, we are going to enrich our knowledge on how to offensively test a cloud…

Room Link : https://tryhackme.com/room/irpreparation

Turn still photos into animated videos with AI using Wondershare Filmora’s Image-to-Video tool for social media, marketing, and creative projects.

When a high-severity ransomware alert fires across your environment, the clock usually starts ticking immediately. Containment. Scope…

Tem dias que em a dor volta sem avisar.

🕵️‍♂️ Cache Deception: The Silent Bug That Tricks CDNs Into Leaking Private Data 🔍 A Bug Hunter’s Perspective Cache Deception is a subtle but dangerous web vulnerability where a CDN …

The Justice Department and FBI seized 13 fake consulting websites that officials say targeted US clearance holders with paid research work designed to obtain sensitive government information.

We already proved the server takes requests from us. Now let’s see how far that actually goes. Part 2 of the SSRF series.

Imagine waking up one morning and discovering that someone had stolen millions of dollars from your bank. 😳

Every spring I read a stack of cybersecurity intern resumes that look like photocopies of each other. Same degree in progress, same…

Você já se perguntou o que acontece nos bastidores quando um Mac corporativo “sabe” que pertence a uma empresa antes mesmo de você criar…

Difficulty: Medium Tags: Active Directory, BloodHound, KeePass, Password Spray, RBCD, Kerberos, Impacket

https://tryhackme.com/room/sighunt

Telmetry and runtime behavior across multiple domains (Anthropic, Microsoft Copilot, Bing, Gemini, and MSN). Here’s the layered interpretation of what’s happening: 🧩 Layer 1 — Browser …

Cybersecurity experts recently identified a massive threat to WordPress websites. Specifically, hackers are actively exploiting a critical UpdraftPlus CVE-2026-10795 vulnerability. This dangerous …

Introduction Since there aren’t many resources or write-ups for this specific CTF on TryHackMe, here is a complete walkthrough.

Subtitle: