I don’t stockpile canned beans, but I am a digital prepper.

Your password is worth almost nothing to a hacker anymore. Your session cookie? That’s the crown jewel.

Measuring human risk by mechanism, not magnitude

Cyberattacks rarely happen in a single step.

Threat intel flagged an APT group, IronShade, actively targeting Linux servers across the region. Instead of waiting to become a victim…

Welcome to this new Medium post. In this one, we will talk about direct $MFT parsing, a technique to enumerate every file on an NTFS volume…

When I started this project, my instinct — like most people learning detection engineering — was to think about correlation first. It felt…

It is always exciting to get some new opportunities when you are a developer. New clients, projects, and even chances to work with people…

Introduction

Task 1 Deploy Deploy the attached VM — no answer needed Task 2 Introduction When it comes to hacking, knowledge is power. The more knowledge you have about a target system or network, the more …

In Part 1, I walked through the architecture of Z3R0-RECON at a high level. This time, we go under the hood — the actual code behind the…

So it’s rapey incels v caped crusaders at present.

All about Hashcat Masking

A few months ago, I decided to go back to the fundamentals.

A case study in trust-boundary failure, Sybil positioning, and the limits of “code is law” — written for a security/pen testing audience…

This is a beginner level room in tryhackme, that helps us learn about the concepts of basic nmap enumeration, password brute forcing and…

Three incidents from July 2026 reveal a structural flaw in how we grant permissions to AI agents.

For as long as ransomware has existed as a category of threat, a person has sat somewhere in the chain. Someone chose the target, tested…

When analyzing a suspicious or malicious email, your first goal is to collect key artifacts that can help determine its legitimacy and…

TL;DR TP-Link has patched two information disclosure flaws in Kasa EC70 v4 and EC71 v4 cameras. The more severe TP-Link Kasa vulnerability, CVE-2026-9770 (CVSS 8.6), stems from a hardcoded cryptog…

TL;DR CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalog on July 16, 2026. Two affect Fortinet FortiSandbox, and one affects Microsoft SharePoint. Federal agencies mus…