David Deutsch, AI and Offensive Security

I Broke an AI Chatbot’s Safety Filters Using Nothing but Arabic Small Talk How a joke about a password file turned into a full safety-filter bypass on one of the world’s biggest AI …

Room Name: Hacker Holidays: Day 3 — Complimentary

LeakNet claims it stole 11TB of NYC Health + Hospitals data containing sensitive medical, financial and biometric records linked to more than 12 million people.

Google has officially unveiled an upgrade for its native Gemini application on the macOS platform. Effective immediately, Mac users can seamlessly summon Gemini across any window interface. Simply…

At a glance Malware family Copybara (Android RAT) Operators Not attributed; kit uses Portuguese-language identifiers Targets N26 banking customers in Italy Delivery vector Vishing call, phishing l…

My first HackerOne report landed as a HIGH-severity information disclosure on a major education platform. Here’s exactly what I found, how…

For the past year, you’ve seen posts about labs, late nights, certifications, networking, and building something from scratch.

Even the most fortified network infrastructure can inadvertently transform into a disastrous entry point for adversaries if a vulnerability resides within its centralized management system. Conseq…

Google has officially distributed invitations for its annual hardware launch event, confirming the debut of the next-generation flagship Pixel 11 series on August 12. Prior to the event, Google pr…

TL;DR GitLab has shipped a new patch release for self-managed installs. Versions 19.2.1, 19.1.3, and 19.0.5 fix 13 security vulnerabilities. The most serious is a high-severity data exposure bug r…

TL;DR Ruby on Rails has patched a critical Rails Active Storage flaw. Tracked as CVE-2026-66066 and rated 9.5 CVSS, it lets an unauthenticated attacker read arbitrary files from the server. Stolen…

TL;DR Google shipped a large Chrome security update on the Stable channel. It fixes 370 vulnerabilities, including seven rated critical. The new build is 151.0.7922.71/.72 for Windows and Mac, and…

Cybersecurity’s Blind Spot in the Age of AI

Master Secure Coding, API Security, DevSecOps, and OWASP Top 10 Using an Intentionally Vulnerable Banking Application

Install the free app and it hands your phone a set of cloud keys, the same set it hands everyone. They’re read-only, but read-only of every…

1.Create a Python virtual environment

Today I solved the Room 404 TryHackMe challenge.

This is the walkthrough of THM Hacker Holidays-Day 02(Room 404) room, which demonstrates the vulnerability.

TASK 2: Room 404