Last week I went to print my documents at a public library.

After attending cybersecurity conferences, I like to take notes and share the talks that stood out to me. This one was by the speaker Ram…

Introduction

Platform: TryHackMe Event: Hacker Holidays 2026 Category: Web Difficulty: Easy Severity: Medium Target: Byte Lotus Guest Experience…

A quiet hotel room, one open port, and a web misconfiguration that proved to be a goldmine.

Web application security challenges often hide their most critical secrets in plain sight. In this walkthrough, we explore The Byte Lotus…

TASK DESCRIPTION

Introduction

Difficulty: Very Easy

In cybersecurity, waiting for an attack is no longer a viable strategy. Offensive security flips the script: instead of only building walls, skilled professionals actively try to break them—ethically and with permission—to find weaknesses before real attackers…

In the previous article, we learned how Kusto Query Language (KQL) helps analysts search and investigate security logs.

My Experience with SQL Injection Labs on PortSwigger

Silver Spring, MD, USA, 28th July 2026, CyberNewswire

TL;DR Mitel published two advisories. The first covers a MiCollab command injection bug rated critical at CVSS 9.8, which an unauthenticated attacker can reach over the network. The second covers …

TL;DR CISA published ICS advisory ICSA-26-204-04 on July 23, 2026. It details five security bugs in Panduit IntraVUE, an industrial network monitoring platform built by Pronetiqs. The most severe …

TL;DR JetBrains patched a critical TeamCity RCE tracked as CVE-2026-63077. The flaw scores a CVSS of 9.8 and affects all TeamCity On-Premises versions. An unauthenticated attacker with HTTP(S) acc…

TL;DR: A public proof-of-concept now targets CVE-2026-42533, an NGINX heap overflow rated CVSS 9.2. The bug lets an unauthenticated attacker corrupt worker memory through crafted requests. Researc…

A researcher has published full technical details and working proof-of-concept code for a Linux kernel vulnerability named Fraggap. Tracked as CVE-2026-53362, the bug lives in the kernel’s U…

This post is the second part of a series on call stack manipulation. In the first part we covered the basic return address overwrite, where…

How threat actors abuse process tracing to rewrite executable instructions in volatile RAM, and how modern EDRs detect memory modification…