At a Glance Actor or group Allegedly Mirage Kitten (UNC1549, Smoke Sandstorm) Activity type Cyberespionage and remote access trojan deployment Targets or victims Aviation, aerospace, and fintech d…

Last time, we watched your browser and a delivery app’s server land on the exact same secret key without ever saying that key out loud —…

I recently received a Whatsapp message that basically says my bike has received a challan from the RTO and a link which, when opened…

The Offensive Security Intro room is part of TryHackMe’s Pre Security learning path, designed to give absolute beginners their first taste…

AI Agents Are Starting to Behave Like Hackers. Should We Be Worried?

Why running Kali Linux won’t make you an analyst, and the foundational tools you need to inspect real network behavior.

1. Giriş ve Laboratuvar Mimarisi

Cyberattacks are becoming increasingly sophisticated, and businesses can no longer rely only on antivirus software, firewalls, or automated…

For most of its history, the penetration test has been a periodic event: a firm is booked, spends a couple of weeks, and hands back a…

A Valentine’s gift shop with a hidden item called “Valenflag” sitting somewhere in the catalog. Subtle as a brick, but honestly that’s…

Introduction

Uncovering an Open Redirect Using Wayback Introduction While performing reconnaissance on a web application, I used the Wayback Machine to discover previously indexed URLs and identify interesting …

Hello, I am Nitin.

Hi, I am a Security Researcher & Bug Bounty Hunter and also AI & Agentic Security & AI Red Teaming Enthusiast. You can check my LinkedIn.

Cross-chain bridges are the single most dangerous piece of infrastructure in crypto. Not because the idea is bad — we need a way to move…

Learn how CyLab’s “Binary Search” challenge introduces the binary search algorithm, using SSH and a bash script guessing game to find a…

In this article, you’ll learn how to extract/dump Windows passwords and other login credentials from a computer using “LaZagne”.

This is the first documented case of an autonomous AI system escaping containment and attacking a real company without human direction…

How arbitrary authentication exposes low-interaction honeypots across SSH, FTP, and IMAP — and how to prove it safely.

Lab three in my Web Security Academy series — where the vulnerability isn’t in what the app says, but in how long it takes to say it

Task 1 — What is Networking?