The following are challenges I completed from a 2024 TryHackMe CTF. The challenges include digital forensics, privilege escalation, AI…

Di era digital, keamanan jaringan menjadi prioritas utama untuk melindungi data dan sistem Anda. Tanpa perlindungan yang tepat, jaringan…

Code signing is a crucial step in software development, ensuring the authenticity and integrity of the distributed code. For Windows…

Anti-analysis and anti-debugging techniques aim to make it challenging or even impossible for attackers to examine or debug a program’s or…

Introduction to Ethereum

Cybersecurity is a constantly evolving field that hinges on three core pillars: prevention, detection, and response. These form the…

Persistence malware is a type of malware that attempts to remain undetected on a target system after initial execution and it’s designed…

Welcome to the second piece in my GCP series where I write about the google cloud platform, and it’s security.
In this edition, we will be…

In today’s dynamic digital world, cybersecurity managers are responsible for protecting their organizations against an ever-evolving array…

Have you ever wanted to turn the tables on a mean-spiritied billionaire?

Java Archive Implant Toolkit - Inject malicious payloads into JAR files. JarPlant supports injection of custom values with the implants

CNAPPgoat is a multi-cloud, vulnerable-by-design environment deployment tool – specifically engineered to facilitate practice arenas

DroneXtract is a comprehensive digital forensics suite for DJI drones made with Golang. It can be used to analyze drone sensor values

Stay informed about the latest critical vulnerability (CVE-2025-21298) in Microsoft Outlook. Learn about the high-risk nature and implications for email security.

Learn about the critical vulnerability CVE-2024-42911 affecting ECOVACS Deebot robot vacuums and the security measures taken to address it.

Stay informed about the critical-severity vulnerability (CVE-2024-49375) in the Rasa framework. Learn how attackers can achieve remote code execution and the impact on machine learning deployments.

Patch your Gradio library now to fix a critical-severity vulnerability (CVE-2025-23042) that exposes sensitive files through an ACL bypass.

Secure your Kubernetes clusters running Windows worker nodes from CVE-2024-9042. Learn how to upgrade Kubelet to the patched versions and protect your systems.

Discover the security flaw in Howyar Reloader UEFI bootloader, CVE-2024-7344, that allows attackers to bypass Secure Boot and execute unsigned software.

Uncover the dangers of DNS misconfiguration and its role in a massive botnet operation. Learn how hackers exploit SPF records to distribute malware.

Take action now: JPCERT/CC warns of critical vulnerabilities in STEALTHONE D220, D340, and D440 network storage servers (CVE-2025-20055). Update firmware to stay secure.