This is the fifth post of a series of posts I’m creating to study for OSCP. You can find the previous post by clicking here.

Getting your first bug in an AI application as deepseek it is something unbelievable

In this article, I’ll walk you through a real bug bounty discovery where I discovered Sensitive information(employee CVs) in 5 minutes…

Here is how you can do it ethically⚠️⚠️⚠️

Let’s talk about bootcamps. Specifically, cybersecurity bootcamps. Over the past few years, I’ve had the pleasure (and sometimes, the…

Hai semuanya! Kali ini saya bakal ngebahas salah satu case menarik di LetsDefend, sebuah platform training Blue Team yang fokus pada…

The CVE® Program is pleased to announce that a “Quick Start Guide for CPE Applicability Statements in the CVE Record Format” (PDF, 3.1MB)…

The “CNA Enrichment Recognition List” for January 27, 2025, is now available with 242 CNAs listed. Published every two weeks on the CVE…

Adopter la lecture numérique, c’est choisir la simplicité, la liberté et l’efficacité. Alors, ne restez pas à l’écart de cette révolution…

უცებ მომაფიქრდა, რომ დამეწერა ჩემი თავგადასავალი კიბერუსაფრთხოებასა და ეთიკურჰაკინგში. არ ვარ ექსპერტი, მაგრამ მინდა გაგიზიაროთ ის მცირე…

Learn about a 0day flaw in Fortinet's FortiOS and FortiProxy products. Explore the technical details and PoC exploit code for CVE-2024-55591

Learn how cybercriminals are using malicious PDF files in a large-scale phishing campaign. Protect yourself and your sensitive information.

Stay informed about the critical vulnerability CVE-2025-22604 in Cacti network monitoring software. Learn how this flaw could allow code execution and compromise sensitive data.

Uncover the secrets behind Premium Panel, a powerful phishing toolkit used in global credential theft campaigns for over two years.

Discover the severe threat of CVE-2025-22612, CVE-2025-22611, and CVE-2025-22609 in Coolify. Secure your servers, applications, and databases.

Discover the sophisticated LockBit ransomware operation leveraging Cobalt Strike beacons and proxy tools. Learn how it infiltrated systems and the impact it had.

Find out how the authentication design flaw in Deepin desktop environment's dde-api-proxy service (CVE-2025-23222) enables local users to bypass authentication and execute unauthorized operations.

Beware of the XWorm Remote Access Trojan (RAT) builder attack. Discover how threat actors are targeting inexperienced cybersecurity enthusiasts with this malicious software.

Updatecli tool vulnerability (CVE-2025-24355): Critical flaw exposes Maven credentials, potentially compromising sensitive data.

Uncover the operations of the prolific cybercriminal group Crazy Evil. Dive into their sophisticated social engineering tactics and cross-platform malware toolkit.

Discover the latest cybersecurity threats during tax season. Find out how cybercriminals are targeting tax agencies and stealing sensitive information.