Measuring human risk by mechanism, not magnitude

Cyberattacks rarely happen in a single step.

Threat intel flagged an APT group, IronShade, actively targeting Linux servers across the region. Instead of waiting to become a victim…

Welcome to this new Medium post. In this one, we will talk about direct $MFT parsing, a technique to enumerate every file on an NTFS volume…

When I started this project, my instinct — like most people learning detection engineering — was to think about correlation first. It felt…

It is always exciting to get some new opportunities when you are a developer. New clients, projects, and even chances to work with people…

Introduction

Task 1 Deploy Deploy the attached VM — no answer needed Task 2 Introduction When it comes to hacking, knowledge is power. The more knowledge you have about a target system or network, the more …

In Part 1, I walked through the architecture of Z3R0-RECON at a high level. This time, we go under the hood — the actual code behind the…

So it’s rapey incels v caped crusaders at present.

All about Hashcat Masking

A few months ago, I decided to go back to the fundamentals.

A case study in trust-boundary failure, Sybil positioning, and the limits of “code is law” — written for a security/pen testing audience…

This is a beginner level room in tryhackme, that helps us learn about the concepts of basic nmap enumeration, password brute forcing and…

Three incidents from July 2026 reveal a structural flaw in how we grant permissions to AI agents.

For as long as ransomware has existed as a category of threat, a person has sat somewhere in the chain. Someone chose the target, tested…

When analyzing a suspicious or malicious email, your first goal is to collect key artifacts that can help determine its legitimacy and…

TL;DR TP-Link has patched two information disclosure flaws in Kasa EC70 v4 and EC71 v4 cameras. The more severe TP-Link Kasa vulnerability, CVE-2026-9770 (CVSS 8.6), stems from a hardcoded cryptog…

TL;DR CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalog on July 16, 2026. Two affect Fortinet FortiSandbox, and one affects Microsoft SharePoint. Federal agencies mus…

TL;DR The Zero Day Initiative published advisory ZDI-26-444 on July 15, 2026. It covers a 7-Zip vulnerability tracked as CVE-2026-14266, scored CVSS 7.0, that can lead to remote code execution. Ve…

Not long ago, the AI coding tool Grok Build triggered fierce community backlash for uploading developers’ complete repositories. Remarkably, SpaceXAI still has not admitted to collecting rep…