In the world of cybersecurity, few names carry as much weight as APT28 (Fancy Bear) and APT29 (Cozy Bear). These two sophisticated hacker…

Cybersecurity is full of talented professionals who struggle to get hired, get promoted, or make an impact. Why? Because they lack one critical skill: Communication. Many cybersecurity professionals…

IT downtime is one of the biggest productivity killers for modern businesses. Whether caused by hardware failures, software issues, or…

Melakukan penetration test, atau sering disebut pentest, adalah proses terstruktur dan metodis untuk menginvestigasi, mengungkap…

Cybersecurity is often seen as a concern only for large enterprises. However, small and medium-sized businesses (SMBs) are becoming prime…

We live in a digital world where our most valuable information exists online — banking details, personal photos, private conversations…

Category: Endpoint Forensics | Tactics: Defense Evasion — Discovery

A segurança de sites é um tema crítico, especialmente quando lidamos com CMS populares como o Joomla. Recentemente, investiguei uma…

The first blog was an introduction to cyber security and the broad range of possibilities it can offer. Now, I am getting into the more…

What Are Black-Box LLMs?

I worked as a Penetration Tester for almost 2 years, but had to shift to a SOC position (which I don’t regret by the way). Almost a month ago, after switching jobs from my SOC position to a new…

The Best Way to Maximize Yield and Rewards with X $X

In the world of bug bounties, nothing feels more rewarding than uncovering a subdomain takeover vulnerability — a flaw that could lead to…

The idea of Hunt-Sleeping-Beacons project is to identify beacons that are unpacked at runtime or running in the context of another process.

AlphaGolang is a collection of IDAPython scripts to help malware reverse engineers master Go binaries. Requirements: IDA Pro (ideally v7.6+) and Python3

Malduck provides many improvements resulting from the CERT.pl codebase, making scripts written for malware analysis purposes much shorter and more powerful.

Discover AnubisBackdoor, a Python-based malware that allows full control over infected machines with advanced evasion techniques.

Learn about CVE-2025-2000, a critical vulnerability in Qiskit SDK that can allow arbitrary code execution and compromise systems.

Explore the C++/CLI IIS backdoor as detailed by Unit 42, uncovering its unique characteristics and implications for security.

Learn about the Sungrow iSolarCloud vulnerability and its serious security risks highlighted by CISA in their latest advisory.

Explore the rise of INDOHAXSEC, a new hacktivist group in Indonesia making headlines with cyberattacks and DDoS activities.