“It always bothers me that, according to the laws as we understand them today, it takes a computing machine an infinite number of logical…

a very important insight into the infrastruture threat modeling

[Write-up] Web Cache Poisoning with an Unkeyed Header.

Hey everyone! 👋

Apa Itu DevOps?

The Risk Management Framework (RMF), as outlined by NIST in SP 800–37 Rev 2, is a structured and comprehensive approach for managing and…

Somewhere in the depths of LinkedIn, an acquaintance of mine recently posed the question:

I have just watched Roger A Grime’s ISC2 moderated seminar titled: 
“North Korea’s Secret IT Army: Has Your Workforce Been…

I’ve always prided myself on being the kind of person who’s mildly paranoid about online security. You know, the sort who covers their webcam with a band-aid despite never actually appearing on Zoom…

Last year, I had the opportunity to present to a group of middle school students about data engineering. I expected questions about coding…

Microsoft clarifies Windows 11 requirements, warning users with unsupported devices to roll back before it's too late

Splunk queries and an incident tracker to help you conduct more efficient investigations

Hacker's Toolbox: The Best Hardware Devices for Penetration Testing

Introduction

If you think this is a simple SSL pinning bypass, read it again — this is a very interesting bypass!

🚨 Important: I didn’t hack anything. I just used Google the right way.

Recon for internal & secret subdomains

What is a Certified Ethical Hacker (CEH)?

Originally published at https://techbylorenzo.com on February 2nd, 2025.

Yes, you heard it right! Someone actually ran Linux inside a PDF file using JavaScript. It might sound crazy, but PDFs aren’t just for…