I’ve been using AI for a while in bug bounty. Usually, I use it to explain code, help me understand something I found, or generate scripts.

An old address on the internet can appear far more trustworthy than a brand-new one – even after its original owner has long since abandoned it. In a series of reports, researchers at Infobl…

A novel Android malware variant currently enables cybercriminals to hijack a victim’s smartphone. This hijacking occurs specifically while the user interacts with banking applications and cr…

TL;DR: Imperva’s Red Team disclosed a Docker CopyEscape vulnerability that turns the ordinary docker cp command into a host file-write primitive. Tracked as CVE-2026-17106, the flaw carries …

A Cowboy Bebop-themed beginner box that covers classic enumeration, FTP, SSH brute-forcing, and a simple privilege escalation.

I found a cute game about refusing birds. So I told Codex it was a CTF, and it stopped playing by the rules

Bug bounty hunting has become one of the most exciting areas of cybersecurity. Security researchers can legally test applications, discover…

Failure at forcing authentication at MCP point.

Description : Can you find this ex hacker turned outdoorsman?

Coding agents install dependencies, run unfamiliar code, start development servers, and execute tests. Giving them that freedom directly on…

If you have ever opened Saleae Logic or PulseView and stared at 40 seconds of SPI at 8MHz, you know the feeling.

Initial Attack Vectors

On Friday, Microsoft confirmed it is building a patch for a Microsoft Defender zero-day called ShieldBreak, now tracked as CVE-2026–69414…

Packet captures intimidate people because they look like a wall of noise. They’re actually a narrative — you just have to know which…

A DFIR Sherlock challenge investigating a Kerberoasting attack by analyzing Domain Controller security logs, PowerShell operational logs…

This is Day 2 of my daily learning series covering Python, Cybersecurity, Cloud, Databases, AI, ML and Disaster Recovery. Yesterday we ran…

If you’re starting your journey into cybersecurity, there’s one tool you’ll hear about again and again — Nmap. It’s one of the first tools…

You don’t always need another cybersecurity tool. Sometimes you just need a better way to use the tools you already have.

TL;DR CISA added CVE-2025-62593 to its Known Exploited Vulnerabilities catalog. The flaw is a code injection bug in Ray, a popular Python framework for scaling AI and Python workloads. It allows r…

Understand how hidden routes and resources can be uncovered using systematic mapping, pattern analysis, and targeted content discovery.