Hi everyone. Back again with another lab on CyberDefenders.

Welcome to this blog. This tryhackme room is about understanding how to design AI agents in cybersecurity.

Alright, let’s start with some basic enumeration by running an Nmap scan against the target.

Ranked: Easy

WSO2 patched it in April. Attackers exploited it in September.

الحمد لله، والصلاة والسلام على رسول الله

Every breach announcement sounds the same.

Security researchers at CERT Polska disclosed several critical T-Mobile 5G Box vulnerabilities. These severe software flaws impact Wistron NeWeb Corporation (WNC) routers. Hackers can exploit thes…

Cisco released multiple security advisories on September 16, 2026, addressing critical Cisco ISE vulnerabilities across enterprise deployments. These defects allow remote attackers to bypass authe…

TL;DR Jenkins fixed 20 plugin vulnerabilities in its September 16, 2026 advisory. Seven of them let attackers break out of the Script Security sandbox and run code on the controller. Most of these…

How to Start Bug Bounty Hunting in 2026 The field is not dead — it has changed. Here is what beginners should learn, how AI should fit into the process, and why consistency matters more than …

I built an OSINT app that checks a username across 559 platforms from your phone — and the hardest part was teaching it to say “I don’t…

Introduction

This article is a guidance for beginners to completely understand the knowledge you need to complete the lab.

I recently completed my CRTA (Certified Red Team Analyst), and I wanted to share my experience for others who are preparing for the CRTA…

…in good way. Let’s take the example of an 8 year old with nail biting.

TL;DR The Apache Software Foundation released patches to address high-severity Apache NiFi vulnerabilities alongside a critical flaw in Apache MyFaces. These software defects expose enterprise dat…

NLnet Labs released version 1.26.1 on September 16, 2026, fixing multiple severe Unbound DNS vulnerabilities. These flaws create serious risks of heap corruption, denial of service, and potential …

Linux kernel developers fixed a critical flaw tracked as CVE-2026-89775 in the KVM hypervisor on August 6, 2026. This severe KVM guest escape defect allows attackers to break out of virtual machin…

TL;DR Docker issued a patch for critical Docker Sandboxes vulnerabilities, including CVE-2026-77179 and CVE-2026-79994. These flaws enable malicious guests to escape isolated microVM workspaces an…

TL;DR VulnCheck discovered a critical heap memory corruption vulnerability tracked as CVE-2026-39919 in Ghostscript. Attackers can exploit this weakness by submitting crafted PDF documents to trig…