Task 1 Introduction

In this last post, I went over using Nmap, its functions, and it’s potential in the cyber world. In this one, I will be showing off Netcat…

Hello! I’m SecureSTC, and I’m excited to share this space with you as I embark on my journey in cybersecurity and web development. I’m 18…

An introduction to YARA rules using Notepad++, IDA, and Hybrid Analysis

Bruxelles – Ospedali e strutture sanitarie nel mirino dei cybercriminali. Il problema è sempre più grave, con attacchi ransomware che…

The phases defined by the actions of identification, protection, detection, response, and recovery include several important measures to be…

Practice Linux using linpeas.sh, capability cap_setuid+ep, python3 -m http.server, export PATH=/home/user:$PATH, echo $PATH, chmod +x, sudo…

Discover essential AI tools that can transform your business in 2025.

A ctf for beginners, can you root me?

Damn Vulnerable RESTaurant is an intentionally vulnerable API service designed for learning and training purposes

go-secdump is a tool built to remotely extract hashes from the SAM registry hive as well as LSA secrets and cached hashes

iMonitor (Endpoint Behavior Analysis System - Then Open Source Procmon) is an endpoint behavior monitoring and analysis software based on iMonitorSDK.

Learn about the recent developments regarding the TikTok ban in the U.S. and how the Trump administration has facilitated a solution.

Security researcher MrAle_98 recently published a proof-of-concept (PoC) exploit for a zero-day vulnerability, CVE-2024-49138. This flaw, which affects the Windows Common Log File System (CLFS) Dr…

Uncover the latest spear-phishing campaign by the Russian threat actor Star Blizzard targeting WhatsApp accounts.

Discover the details of CVE-2025-23061, a critical vulnerability in Mongoose. Understand the potential risks it poses to MongoDB database interactions and how to protect your application.

Beware of the malicious PyPI package targeting Discord developers. Learn how typosquatting can lead to token theft and backdoor installation.

Discover the Sneaky 2FA phishing kit, a sophisticated tool that bypasses MFA to exploit Microsoft 365 accounts. Stay informed about the latest threats.

NVISO Labs uncovers a new phishing campaign by Black Basta. See how they employ Microsoft Teams as a tool for social engineering attacks.

Stay informed about the latest security advisory for BlackBerry's QNX Software Development Platform (SDP) and the vulnerabilities it poses.

Discover the dark side of Truth Social: scammers exploiting user trust for phishing links, investment fraud, and cyberattacks.