Executive Summary

The models weren’t the vulnerability. The wrapper around them was.

How a “list the Wi‑Fi around me” weekend project turned into a radio‑sensing engine that recognises rooms, spots trackers following you…

Documenting my cybersecurity journey — one framework at a time.

Here is why & how you can too…

Offense gets cheaper and faster with every model drop. Defense is still slow and expensive.

I run a cybersecurity company. My whole business is telling other people how exposed they are.

The alert never fired. The antivirus console stayed green. And yet, somewhere in a 300-line config file, a single word had changed.

Introduction

The reset flow hands you the exact value its tokens are built from

Do you have an older rooted Android phone sitting unused in a drawer? Instead of leaving it there, you can turn it into a practical NFC reader and USB keyboard for your computer. With a custom Android app (NFC to HID), your phone can read the unique indentation…

CWE-639: Authorization Bypass Through User-Controlled Key CWE-284: Improper Access Control CVSS 3.1: 6.5 (Medium) —…

CWE-640: Weak Password Recovery Mechanism CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-204: Observable Response…

A feud between ShinyHunters and Cl0p reveals how cybercrime evolved from isolated hackers into a lucrative industry with rivals of its own.

Attackers are tired of knocking on your front door. They are going after the tools that hold your keys: the AI gateway, the software…

An Introduction to the Kerberos Protocol

SetUID Binaries and Running Commands as Another User

Inside the Turner Incident: A Full Forensic Walkthrough (THM — Windows)