TL;DR Qualys disclosed RefluXFS on July 22, 2026. Tracked as CVE-2026-64600, it is a Linux kernel XFS privilege escalation to root. Qualys estimates the flaw potentially affects more than 16.4 mil…

TL;DR Check Point disclosed a SmartConsole authentication bypass on July 22, 2026. The flaw, CVE-2026-16232, is already exploited in the wild against a handful of customers. It carries a CVSS scor…

TL;DR The Exim team published advisory EXIM-Security-2026-06-22.1 on July 22, 2026. It describes an Exim vulnerability that lets a local attacker read files outside the mail spool. The bug can lea…

Picture this: you open a support ticket with a tech giant because your account got locked out. You share your email, maybe your phone…

The Art of Finding What’s Hidden

👻 The Ghost Subscriber: How I Haunted Hidan’s Premium Tiers An IDOR vulnerability in subscription APIs, a $200 bounty, and the 7-day ghost that proved privacy matters everywhere By …

If you’ve spent five minutes looking at a vulnerability report or a bug bounty write-up, you’ve seen these tags everywhere: CWE-79…

Do you know what Man in the middle attack is?

Paperclip Logic, Academic Pressure, and Swarm Behavior

This is the second part of the previous writeup. If you have skipped the first part, it is recommended to read it first in order to…

Understanding the backbone of Windows environments, and why compromising it often means compromising everything.

I create cybersecurity content since the past 1 year.

I attended Infosecurity Europe 2026 a few weeks ago.

Difficulty: Medium / Advanced (Active Directory)

Phase 2 — Finding the Exact Offset & Taking Control of EIP 🎯

Security Operations Centers (SOCs) rely heavily on alerts generated by SIEM, EDR, and other security tools. These alerts are essential, but…

We’re opening the doors to our Next.js 16 + Supabase full-stack CMS and giving away lifetime premium licenses to everyone who helps us…

قَالُوا سُبْحَانَكَ لَا عِلْمَ لَنَا إِلَّا مَا عَلَّمْتَنَا ۖ إِنَّكَ أَنتَ الْعَلِيمُ الْحَكِيمُ

How I accidentally became a self-publishing cyber-bio-nanopunk novelist