I spent years hearing “Active Directory” in cybersecurity content. I never really understood it. Until today.

TL;DR Walkthrough of the TryHackMe rooms Phishing Basics and Introduction to Wordlists.

The Citizen Lab confirmed a Pegasus spyware infection on the iPhone of a Serbian student activist on September 2, 2026. The attack used a zero-click iMessage exploit, so it needed no clicks or tap…

TL;DR SonicWall SMA 1000 vulnerabilities are currently being actively exploited in the wild. Threat actors chain these zero-day flaws to execute arbitrary code on susceptible VPN devices. Conseque…

TL;DR Software developer JetBrains has resolved 29 security flaws across its enterprise ecosystem. These JetBrains vulnerabilities include two critical flaws that threaten administrative control. …

At a Glance Malware family: Multiple families including ModeloRAT, EtherRAT, AsukaStealer, and C2Looper Threat actor: Suspected initial access broker Woodgnat (KongTuke) and unnamed cybercrime gro…

TL;DR Security researchers have uncovered two critical vulnerabilities leading to a complete Rclone auth proxy bypass. These flaws enable remote attackers to circumvent authentication mechanisms e…

A researcher published full technical details and proof-of-concept code for a Windows HTTP.sys vulnerability on September 2026. Tracked as CVE-2026-62735, the flaw carries a 7.8 CVSS score. It let…

Netskope Threat Labs found a major upgrade to the Python NodeStealer malware in August 2026. The Facebook-focused infostealer now works as full spyware. It logs keystrokes, watches the clipboard, …

Adobe shipped an emergency hotfix for a maximum-severity flaw in Adobe Commerce and Magento on September 7, 2026. The Adobe Commerce vulnerability, CVE-2026-75650, scores a perfect 10.0 CVSS. It g…

The Leviathan wargame primarily focuses on basic reverse engineering, file permissions, exploiting SUID binaries, and understanding system…

Imagine this.

30-Second Version: A wave of security-specific Claude Code plugins shipped this year — marketplaces, MCP servers, and skill packs built…

So, How Did XBOW Actually Get Here? — Timsux Wales

This is how, i got all information in one image.

Using RST Cloud Threat Intelligence to Uncover Hidden Relationships Across ShinyHunters Malware, Infrastructure, and Threat Actor…

Introduction

Meta description: A hands-on exploration of Burp AT, including its tools, project context, skills, autonomy modes, new Effort control…

The API Testing labs in PortSwigger Web Security Academy go beyond classic web vulnerabilities and teach you how to attack the hidden…

Source Disclosure → Auth Bypass → OS Command Injection

Introduction