A major flaw in Coldcard’s firmware has resulted in the compromise and draining of 500 Bitcoin addresses for a total of 594.4772 BTC…

The most important tool in network reconnaissance is not Nmap, not Shodan, not any scanner at all. It is the ability to ask a question…

Room: Splunk: Setting up a SOC Lab Path: SOC Level 2, Section 2: Advanced Splunk Difficulty: Intermediate Time: 60 minutes Prerequisites…

Scenario: A short PCAP was captured from the guest network of a hotel. Tiny packets were observed going out to a :8080 address at…

Executive Summary:

https://tryhackme.com/room/hh-packedlight-02e5330c

Room: Packed Light Category: Forensics / Network Analysis Difficulty: Easy Time taken: ~20 minutes

TryHackMe Walkthrough: Splunk — Exploring SPL (Step-by-Step with Q&A) Room: Splunk: Exploring SPL Path: SOC Level 2 → Section 2: Advanced Splunk Difficulty: Intermediate | Time: ~60 min …

This challenge involves analyzing network traffic to identify a covert C2 (Command & Control) channel and exfiltrate data hidden in *HTTP…

Someone was smuggling data out of the resort network one cookie at a time. We used Wireshark, Base64 and a single XOR key to decode the…

A backdoored ARVE WordPress Plugin release could grant attackers administrator access with one token, but WordPress.org blocked automatic distribution to WordPress sites.

XRP volatility drives faster crypto trading as AI tools gain traction, while phishing, exchange attacks and automation risks test digital asset safeguards.

An infected Word document can imperceptibly distort a corporate report and subsequently transfer malicious instructions into new files. Merely opening the document is insufficient to launch this a…

Understanding Dangling DNS Records Forgotten domain records often lurk unnoticed within corporate networks. Consequently, these abandoned entries create severe security risks when cloud resources …

Sometimes, compromising a digital environment requires zero downloads or explicit user confirmations. Indeed, the CVE-2026-10702 vulnerability embedded within Firefox for Android enabled seamless …

TL;DR OpenAM 16.1.2 patches four security flaws in the open-source access management server. Three of these OpenAM vulnerabilities lead to remote code execution. The worst, CVE-2026-62379, allows …

TL;DR The Erlang/OTP team fixed five security flaws across the runtime and its TLS stack. The most serious lets a network attacker bypass server certificate checks entirely. The rest can crash a B…

From spotting an exposed developer portal to bypassing authentication with a single path trick.

Muhammad Abdillah NASA VDP

Transitioning into cybersecurity is often framed around certifications, textbook theory, and guided lab environments like TryHackMe or…

The indie game Meccha Chameleon recently became the focus of a cybersecurity incident involving malicious Steam Workshop content. What…