Anonymity refers to the state of having one’s identity hidden and not visible to others. It is the desire to remain anonymous and not have…

RCE.Expoite

For teams weighing automated against manual pentesting: what each one finds, what each misses, and how to combine them sensibly

Penetration Testing & Vulnerability Assessments (UK Legal Frameworks)

Platform: PortSwigger Web Security Academy oracle-sql-injection-portswigger-writeup

Box: CVE-2024–48914 Difficulty: Easy

INTRODUCCIÓN

Welcome to this new Medium post, in this one I’ll show you how to identify a driver vulnerability that allows reading and writing arbitrary…

An interview-focused and exam-focused guide to CIA, IAM, NIST CSF, Security Controls, SOC, Incident Response, and DevSecOps.

Machine Information

TL;DR AMD has disclosed CVE-2026-43598, an AMD RCCL vulnerability rated 7.7 on CVSS 4.0. The flaw sits in the ROCm Communication Collectives Library and could let a compromised peer run code remot…

For tool-using AI systems, data credibility, instruction authority, and permission to act are three different decisions.

Platform: TryHackMe
Machine: Publisher
Focus: Web Enumeration, SPIP, AppArmor, SUID, Linux Privilege Escalation

It’s 1 a.m. You’ve been poking at a box for two hours, you finally land a foothold, and you’re thrilled. Then you close the laptop, because…

1. Ringkasan Eksekutif (Executive Summary / TL;DR)

TL;DR The Document Foundation has fixed six flaws in LibreOffice, led by CVE-2026-63277, a LibreOffice Calc vulnerability that runs attacker code when a user opens a spreadsheet. Researchers have …

OpenAI has unveiled its approach to text watermarking in response to the EU AI Act. The company will add an invisible signal to eligible ChatGPT and Codex output in the European Union. Meanwhile, …

TL;DR Atlassian has patched CVE-2026-21589, a critical Atlassian Data Center vulnerability with a CVSS score of 9.3. The arbitrary file access bug lets an unauthenticated attacker read files from …

TL;DR A Twenty CRM vulnerability, CVE-2026-105763, let any workspace member read other members’ IMAP, SMTP and CalDAV passwords in plaintext. The flaw scores 9.6 on CVSS and needs only the d…

At a Glance Organization Trump Mobile (access allegedly gained via partner Liberty Mobile) Data exposed Names, emails, phone numbers, home addresses and order details People affected 3,615 custome…

TL;DR IBM has published a security bulletin covering 25 Langflow vulnerabilities in Langflow OSS versions 1.0.0 through 1.12.2. Two flaws, CVE-2026-104334 and CVE-2026-93674, score 9.8 on CVSS 3.1…