Day 3 challenge of Hacker Holidays focused on a common cloud security issue: an AWS Cognito Identity Pool misconfiguration.

You can play this room for free: “https://tryhackme.com/room/hh-complimentary-05e0b604”

Introduction:

This is the walkthrough of THM Hacker Holidays-Day 01(The Concierge Knows Too Much) room, which demonstrates the prompt injection…

A 5-minute visual walkthrough of unsanitized inputs, payload mechanics, and parameterized queries.

TL;DR Cisco is warning about a Cisco FMC vulnerability under active attack. Tracked as CVE-2026-20316, it lets a remote attacker log in using a hidden static account. Cisco confirms exploitation, …

If you hear “hacker” and picture someone in a hoodie typing furiously in a dark room, it’s time to update that image. There’s a whole…

David Deutsch, AI and Offensive Security

I Broke an AI Chatbot’s Safety Filters Using Nothing but Arabic Small Talk How a joke about a password file turned into a full safety-filter bypass on one of the world’s biggest AI …

Room Name: Hacker Holidays: Day 3 — Complimentary

LeakNet claims it stole 11TB of NYC Health + Hospitals data containing sensitive medical, financial and biometric records linked to more than 12 million people.

Google has officially unveiled an upgrade for its native Gemini application on the macOS platform. Effective immediately, Mac users can seamlessly summon Gemini across any window interface. Simply…

At a glance Malware family Copybara (Android RAT) Operators Not attributed; kit uses Portuguese-language identifiers Targets N26 banking customers in Italy Delivery vector Vishing call, phishing l…

My first HackerOne report landed as a HIGH-severity information disclosure on a major education platform. Here’s exactly what I found, how…

For the past year, you’ve seen posts about labs, late nights, certifications, networking, and building something from scratch.

Even the most fortified network infrastructure can inadvertently transform into a disastrous entry point for adversaries if a vulnerability resides within its centralized management system. Conseq…

Google has officially distributed invitations for its annual hardware launch event, confirming the debut of the next-generation flagship Pixel 11 series on August 12. Prior to the event, Google pr…

TL;DR GitLab has shipped a new patch release for self-managed installs. Versions 19.2.1, 19.1.3, and 19.0.5 fix 13 security vulnerabilities. The most serious is a high-severity data exposure bug r…

TL;DR Ruby on Rails has patched a critical Rails Active Storage flaw. Tracked as CVE-2026-66066 and rated 9.5 CVSS, it lets an unauthenticated attacker read arbitrary files from the server. Stolen…

TL;DR Google shipped a large Chrome security update on the Stable channel. It fixes 370 vulnerabilities, including seven rated critical. The new build is 151.0.7922.71/.72 for Windows and Mac, and…