Whilst it might be a somewhat controversial opinion, I think it’s important to highlight that the ASD Essential 8 is collection of security…

Protecting Your Digital Life

Hi everyone, I’m Ed, just a normal guy from PH wanted to learn about hacking. I hope you can learn something about it. Thank you for…

As part of my continuous journey in cybersecurity, I recently tackled the “Active” machine on HackTheBox. This Windows-based challenge…

Are you looking to boost your business growth and achieve greater success in the digital marketing world? Do you want to learn how to use X…

EDRSandBlast is a tool written in C that weaponizes a vulnerable signed driver to bypass EDR detections (Notify Routine callbacks

Flutter Spy is a Bash-based command-line tool designed to provide insightful code analysis and data extraction capabilities from built Flutter apps

HTMLSmuggler - JS payload generator for IDS bypass and payload delivery via HTML smuggling.

Attention AdForest WordPress theme users: severe security flaw (CVE-2024-12857) allows attackers to bypass authentication and take over your site.

Node.js security update: Patching high-severity vulnerability (CVE-2025-23083) that could allow unauthorized access to sensitive data.

Learn about the resurgence of DigitalPulse proxyware and its impact on Windows systems. Find out how attackers steal bandwidth for profit.

Discover the critical security flaws in Apache Ambari and the potential impact on Hadoop clusters. Stay informed about CVE-2025-23196 and other vulnerabilities.

Beware of Zendesk phishing campaigns using custom subdomains. Learn how threat actors are leveraging the platform's free trial to deceive unsuspecting users.

Discover the critical vulnerabilities in Planet WGS-804HPT switches and the impact of CVE-2024-52320. Learn about the importance of firmware security.

Beware of LinkedIn as an initial infection vector for cybercriminals. Learn about Lazarus Group's Operation Dream Job and how they exploit legitimate accounts.

Uncover the dangerous world of botnets with the emergence of the AIRASHI botnet. Explore its relentless evolution and the 0-day vulnerability it exploits.

Discover the security risks of NTLMv1 authentication protocol and how attackers can bypass Active Directory policies.

Learn about the ongoing cyber campaign targeting German organizations. Explore the advanced tactics, including DLL proxying, used by the attackers.

Unveiling the exploitation of Meta's advertising infrastructure by a sanctioned Russian IT firm. Learn about the Doppelgänger operation and its tactics to manipulate public opinion.

Learn about the ModiLoader malware distribution tactic: how it evades email security and targets victims through phishing emails.

Free Link:- https://medium.com/@securityinsights/how-i-found-crlf-in-2-minutes-easy-bug-1-33909533be19?sk=fead691440c6d2740333e1bfb53f2d89