Here is a quick walkthrough of a room in the TryHackMe Hacker Holidays 2026, a 14-day cybersecurity challenge where a new room unlocks…

CryptoCabana Walkthrough

hello! its a writeup for support room that is a challenge in the TryHackMe.com . As always, I try to explain everything simply and easily.

A beginner-friendly walkthrough demonstrating web application enumeration, API analysis, business logic testing, and exploiting a Race…

CryptoCabana is a TryHackMe room from the Hacker Holidays series that focuses on cloud security and Azure misconfigurations.

Every technology era creates its own version of the same security mistake: confusing data with instructions.

An ethical bug bounty recon checklist for discovering exposed configuration, source code, backups, secrets, documentation, logs, and other…

Introduction: The Modern AI Security Dilemma

Welcome to this new Medium post, in this one we will see an interesting continuation of one of the previous posts where we were talking…

Recovering a Near-Ultrasonic Acoustic Channel with Python

Six deliberately broken systems, one weekend, and the quiet discipline of never submitting a flag I couldn’t prove.

Exploring the Search Processing Language [SPL] that runs in Splunk’s “Search Heads”

Due to recent issue i have been encountering while trying to post a long story here . I have to switch to using github to document my…

It’s an intermediate, practical, conceptual guide on using scanning tool Nmap to collect essential information before exploiting a target.

Cybersecurity is no longer just an IT job — it’s one of the highest-paying and fastest-growing careers in the world. As cyber threats…

Atlanta, GA, 4th August 2026, CyberNewswire

TL;DR Veeam patched a maximum-severity Veeam ONE vulnerability. CVE-2026-64633 allows remote unauthenticated code execution and scores a perfect CVSS 10.0. Admins should update to build 13.1.0.703…

Las Vegas, United States, 4th August 2026, CyberNewswire

TL;DR Researchers disclosed three pre-authentication flaws in Xlight FTP Server. The most severe is a Xlight FTP Server flaw, CVE-2026-67192, a stack buffer overflow that may allow remote code exe…

At a glance Malware family Shai-Hulud variant (“Mini Shai-Hulud”) Threat actor Unattributed; linked to the Shai-Hulud lineage and prior TeamPCP and antv campaigns Targets npm and JavaS…

TL;DR HashiCorp patched three bugs in its Terraform MCP Server. The worst Terraform MCP Server flaw, CVE-2026-16498, earns a maximum 10.0 CVSS. All three can expose Terraform tokens in multi-user …