Web Application Firewall (WAF)

“SaaS is dead,” Satya Nadella sparked quite a conversation. He was pointing to the paradigm shift from traditional workflows to ones…

This morning over pancakes and Spam, our kitchen turned into a full-blown tech conference. We had a panel discussion, expert disagreements…

Start the target system Nightfall Machine in Virtual machine and start the attack machine (Kali linux). Run the basic sudo arp-scan -l in…

Ne Oldu?

الحمد لله الذي عَلَّمَ بالقلم.. عَلَّمَ الإنسانَ ما لم يَعْلَم والصلاةُ والسلامُ على خيرِ مُعَلِّمي الناسِ الخير محمد أما بعد

Ever heard of a file that’s both a JPEG and a PHP script?

Context in AI

There’s a lot of talk about web3 development solutions, but is it really enough just write code and assume everything will work fine on…

Overview

Open-Source Intelligence, better known as OSINT, is one of the most popular (and easiest) ways for security newbies to dip their toes into…

Investigate an incident with Elastic to discover data exfiltration activity started from phishing email attachment!

A 2025 FTC report reveals AI voice scams now account for 1 in 3 financial fraud cases, with losses surpassing $11M daily. This guide…

Can you breach the server?

With rising risks of cyberattacks , every organization these days is concerned about security posture of their cloud infrastructure…

Introduction: In modern threat landscapes, attackers often rely on legitimate Windows tools to carry out malicious activities stealthily…

There’s a lot of excitement around new AI integrations and tools like Microsoft’s Copilot stack and the Model Context Protocol (MCP). MCP…

I think that HEUR.Trojan.Script.Generic is one of the most misunderstood malware detections. Unlike specific threats like Emotet or…

Introduction

A veces, no es durante un pentest o una prueba de concepto cuando aparecen las cosas más interesantes, sino en medio de tareas que parecen…