TL;DR Phoenix Contact disclosed three vulnerabilities in PLCnext firmware on August 12, 2026. One flaw, CVE-2025-41771, lets a low-privileged attacker execute unauthorized SQL queries. A second, c…

At a glance Malware family Gunra ransomware (RaaS, Conti-derived) Threat actor Gunra operators and affiliates, also branded Golden Community Targets Government and critical infrastructure across f…

Web application vulnerabilities rarely exist in isolation.

As businesses increasingly depend on web applications, mobile apps, APIs, cloud platforms, and SaaS products, application security has…

Almost every MCP write-up blurs two different things — including one of mine. Deferring a tool definition and executing model-written code…

Target file: voicemail_007_wav.wav Path: ~/OSINT/TraceLabs/challenge_45/ Date: 2026-08-14 Methodology: Spectrogram Analysis → Voice…

Writeup — ScadaBR CTF (TryHackMe, room: Brr)

What’s changed, what you actually need to study, the tools that matter and my honest recommendations and lessons from experience, including…

Task 1

Cybersecurity has become a critical requirement for organizations that rely on digital infrastructure, cloud platforms, enterprise…

In the fast-paced world of software development, there are many undocumented endpoints that are lost amid the pace of development. Shadow…

What’s up everyone! Nitin here

How “Hello, {name}” turns into remote code execution.

A simple Wayback Machine recon uncovered archived pages exposing an estimated 44,560 job applicant emails, highlighting the risks of…

A beginner's journey from self-doubt and endless overthinking to taking action and conducting my first real web security investigation.

No budget. No problem. Some of the best security professionals learned everything on free resources.

PART 4 — When Internal Endpoints Become Part of the Public API Surface

From Smali to Frida: How Codex Accelerated My Android Security Assessment This is my first article on Medium, and I wanted to start with something that closely reflects the kind of work I enjoy most …

Room: Support Kategori: Web Application Penetration Testing → Remote Code Execution Estimasi Waktu: 60 menit Target IP: 10.49.167.170

First of all, we must scan the target IP to have idea about attack surfaces. We can directly scan the ports and versions of the open ports…

How to Explain CEH v13 to a philosopher—someone like Plato, Kant, or Heidegger. This update is not merely a technical software refresh; it represents a fundamental redefinition of the …