You might think a private server keeps your data safe, but insider attacks and memory dumping are real threats. It‘s why you have to…

Investigating a suspicious XLSM file with VirusTotal

Today, I embarked on my cybersecurity bootcamp journey with TryHackMe, a fantastic platform that simulates real-world cybersecurity…

Salam. Bu write-up-da TryHackMe saytında olan “Smol” adlı CTF-in həllinə baxacağıq.

ThievingFox is a collection of post-exploitation tools to gather credentials from various password managers and Windows utilities

POSTDump is an another tool to perform minidump of LSASS process using few techniques to avoid detection.

HardeningMeter is an open-source Python tool carefully designed to comprehensively assess the security hardening of binaries and systems.

A newly discovered race condition in Apple’s macOS kernel (XNU) could allow attackers to escalate privileges, corrupt memory, and potentially achieve kernel-level code execution, according to secu…

Discover the latest supply chain attack orchestrated by the North Korean APT Lazarus Group. Learn how the BeaverTail malware infiltrates developer environments.

Critical buffer overflow vulnerability found in end-of-life D-Link routers! CVE-2024-57376 could allow attackers to execute arbitrary code. Learn more.

Discover the threat of Devil-Traff: a bulk SMS platform used by cybercriminals for phishing attacks. Learn how attackers exploit its features and tricks to deceive unsuspecting victims.

Rockwell Automation's FactoryTalk AssetCentre software has critical vulnerabilities (CVE-2025-0477) that pose severe risks to industrial control systems. Stay informed and protect your ICS.

Unveiling the dark side of malicious AdTech: Explore the impact of deceptive ads, fake alerts, and manipulated news content on compromised websites.

Learn about CVE-2025-0851, a newly discovered vulnerability in DJL, and how it can leave systems open to potential attacks.

Explore the evolution of SparkRAT, a powerful tool for cybercriminals. Learn about its modular design, web-based interface, and cross-platform support.

Learn how threat actors are weaponizing .gov domains for phishing. Explore the vulnerabilities they exploit and the impact on security measures.

Discover the risks of web misconfiguration and the severe data exposure incidents it can cause. Learn how to protect your sensitive files from unauthorized access.

[Write-up] Blind Server-Side Request Forgery (SSRF) with Out-of-band Detection.

boot2root machine for FIT and bsides guatemala CTF

Welcome to the Future: The Smart City Revolution

What are Enterprise Browsers?