What is SSRF (Server-Side Request Forgery)? Explained Simply

Red Team activities play a critical role in testing the boundaries of organizational defense in cybersecurity. The Command and Control (C2)…

JWT simplified

Time for another Hack The Box Academy lesson! This post covers the Components of a Network chapter. Let’s not waste time and get to it!

Imagine logging into your account one day, only to find your personal data stolen, your funds drained, or your posts deleted — all because…

What if the next global crisis isn’t chaos — but quiet compliance? A look into how power, identity, and control could be reshaped after the lights go out. No warning, no countdown. Just a sudden…

From classroom theory to real‑world practice

The rise of artificial intelligence has revolutionized how businesses operate, but it has also escalated cybersecurity threats. As…

Today, I dove into the powerful world of Zeek, a flexible network security monitoring tool used by defenders and analysts to gain…

The digital landscape is constantly evolving, and with it, the critical need for robust cybersecurity measures. As someone deeply…

When Zsh Forgets Your Commands (and How I Fixed It)

In an era of advanced threats and cloud-native attacks, SIEM is no longer optional — here’s why it’s critical for every modern…

And lived to write about it

fennec is an artifact collection tool written in Rust to be used during an incident response on *nix based systems.

SEEKR is an OSINT tool to help you through the process of gathering and organizing information about people.

Mozilla CFO warns that losing Google search default payments in the antitrust trial could jeopardize Firefox's future and the open web.

Top Chinese smartphone brands (Xiaomi, Huawei, OPPO, vivo, OnePlus) are reportedly developing an Android-based OS independent of Google amid US tech restrictions.

Microsoft announces a new "Copilot+ PC" and Surface device launch on May 6th. Expect a smaller Surface to rival iPad Pro and Snapdragon processors.

Recorded Future analysis exposes MintsLoader, a stealthy malware loader using advanced evasion to target industrial, legal, and energy sectors.

A critical vulnerability (CVE-2025-2774) in Webmin allows remote attackers to escalate privileges and execute code as root. Update to version 2.302 now.