Scenario: A short PCAP was captured from the guest network of a hotel. Tiny packets were observed going out to a :8080 address at…

Executive Summary:

https://tryhackme.com/room/hh-packedlight-02e5330c

Room: Packed Light Category: Forensics / Network Analysis Difficulty: Easy Time taken: ~20 minutes

TryHackMe Walkthrough: Splunk — Exploring SPL (Step-by-Step with Q&A) Room: Splunk: Exploring SPL Path: SOC Level 2 → Section 2: Advanced Splunk Difficulty: Intermediate | Time: ~60 min …

This challenge involves analyzing network traffic to identify a covert C2 (Command & Control) channel and exfiltrate data hidden in *HTTP…

Someone was smuggling data out of the resort network one cookie at a time. We used Wireshark, Base64 and a single XOR key to decode the…

A backdoored ARVE WordPress Plugin release could grant attackers administrator access with one token, but WordPress.org blocked automatic distribution to WordPress sites.

XRP volatility drives faster crypto trading as AI tools gain traction, while phishing, exchange attacks and automation risks test digital asset safeguards.

An infected Word document can imperceptibly distort a corporate report and subsequently transfer malicious instructions into new files. Merely opening the document is insufficient to launch this a…

Understanding Dangling DNS Records Forgotten domain records often lurk unnoticed within corporate networks. Consequently, these abandoned entries create severe security risks when cloud resources …

Sometimes, compromising a digital environment requires zero downloads or explicit user confirmations. Indeed, the CVE-2026-10702 vulnerability embedded within Firefox for Android enabled seamless …

TL;DR OpenAM 16.1.2 patches four security flaws in the open-source access management server. Three of these OpenAM vulnerabilities lead to remote code execution. The worst, CVE-2026-62379, allows …

TL;DR The Erlang/OTP team fixed five security flaws across the runtime and its TLS stack. The most serious lets a network attacker bypass server certificate checks entirely. The rest can crash a B…

From spotting an exposed developer portal to bypassing authentication with a single path trick.

Muhammad Abdillah NASA VDP

Transitioning into cybersecurity is often framed around certifications, textbook theory, and guided lab environments like TryHackMe or…

The indie game Meccha Chameleon recently became the focus of a cybersecurity incident involving malicious Steam Workshop content. What…

Threat:

It usually starts small. An email that looks normal.
A login request that doesn’t seem suspicious.
Or maybe just a slow system that…

Corridor is a small room, and it doesn’t pretend otherwise. You land on a single page: a hallway lined with doors, nothing else to click…