With the proliferation of generative AI and large language models (LLMs), the threshold for discovering software vulnerabilities has plummeted. However, this has also unleashed unforeseen repercus…

Perplexity, a pioneering artificial intelligence search engine and agentic service startup, has secured a monumental reversal in its legal confrontation with e-commerce titan Amazon regarding auto…

Unwanted Application Deployment Microsoft’s actions continually elicit a profound sense of bewilderment. Recently, the corporation began aggressively deploying an application christened OneD…

At a glance Field Detail Malware family OctLurk (plugin-based backdoor); SilkLurk (plugin-based backdoor); LurkProxy (network proxy utility) Threat actor Unknown group; assessed with medium confid…

Overview

Why API Security Matters More Than Ever

Introduction

Last month, I did something that felt both reckless and inevitable.

When DNA Becomes Code

When OpenAI launched ChatGPT in late 2022, the world marveled at its ability to write poetry, debug code, and summarize complex documents…

Active Directory From Zero to Hero — Part 2

For the past month, I’ve had the opportunity to be part of the Thunder Cipher Cybersecurity Internship, a journey that challenged me to…

Category: Cloud, Azure, Storage Misconfiguration, Key Vault, Secret Versioning Difficulty: Medium Points: 135

This room shifts focus from Splunk over to the Elastic Stack, specifically Logstash, the data processing engine that sits between raw logs…

A hardcoded SAS token in the website’s JavaScript led to a service account. That service account unlocked an Azure Key Vault. The vault’s…

c4ptur3th3fl4g — TryHackMe WriteUp with Flags Date: 05/09/2025 Room Link: https://tryhackme.com/room/c4ptur3th3fl4g My Profile: https://tryhackme.com/p/RayenHafsawy 🧭 Introduction This room is a …

Exploiting an Over-Permissioned Azure SAS Token to Recover the Hidden Flag

Fixit, A TryHackMe Walkthrough