An end-to-end SOC investigation using Sysmon, Windows Security Logs, and PowerShell telemetry in a simulated enterprise environment.

Something is hiding in the network traffic. Hunt through Zeek logs and uncover what slipped through.

A supplier email hides an odd attachment. Follow the evidence and find what left the workstation.

Cihangir Dündar | Uluslararası Siber Güvenlik ve Savunma Teknolojileri

PHP2Shell submerge le web et de nouvelles failles menacent déjà Le 21 octobre 2026, PHP a publié des correctifs urgents contre PHP2Shell. Des millions d’attaques visent les serveurs sans …

The PHP Foundation recently published a security disclosure detailing a remote code execution risk. Specifically, maintainers registered the issue as CVE-2026-115560 across national vulnerability …

Apple officially rolled out iOS 27.1 today with an exclusive hardware focus. Specifically, this operating system release targets the revolutionary iPhone Duo foldable handset. Apple developers pre…

From Movie Plot to Engineering Nightmare For years, films have shown a clever AI breaking out of its lab to reach the open internet. Many people dismissed that as Hollywood fiction. Today, frontie…

From networking diagrams to actual exploitation — my bug hunting journey starts here.

The AI assistant isn’t the target — it’s the confused deputy you weaponize against everything sitting behind it.

In August 2022, a hacking group later dubbed “0ktapus” pulled off something that should scare every business owner reading this. They…

Description: A supplier email hides an odd attachment. Follow the evidence and find what left the workstation.

This box’s whole pitch right there on the landing page is that there’s more than one way in, intended paths and unintended ones both, and…

Malawi is building its digital economy on software it has not checked. Websites are launched, payment portals go live, customer databases…

Two critical vulnerabilities in PHP exposed a deeper problem in memory safety — and demonstrated how AI-assisted security research can help…

Cybersecurity Basics

As part of my prep for the Hack The Box CPTS (Certified Penetration Testing Specialist) certification, I’ve been working through retired…

Part 1 — PHP2Shell: From an HTTP Request to Remote Code Execution

Founded in 2025 by Unit 8200 alumni, Tel Aviv-based Mave uses AI agents to investigate alerts across existing security stacks.

How a textbook-secure application, CSRF tokens, SameSite cookies, strict CORS, and a WAF, fell to a single HTML file

When a company asks for “a pen test”, the provider has to make a choice the buyer rarely sees: how much the testers are allowed to know…