So you want to hack an AI? Or more specifically, a Large Language Model (LLM)? Whether you’re a seasoned pentester or just LLM-curious…

Todos os dias, pessoas e pequenos negócios recebem e-mails com links suspeitos, anexos estranhos ou mensagens que parecem legítimas — mas…

Malvertising isn’t about some shady pop-ups or clickbait banners screaming “Lose Weight Overnight!” (though, those don’t help either).

The Invisible Thief: Understanding Data Surveillance

Ever tried switching to Signal or Telegram, only to realize no one else in your contacts did? That’s not your fault — it’s a design trap…

In 2025, WordPress powers over 40% of all websites — making it not just popular, but a prime target for cyberattacks. The truth? Outdated…

How ChatGPT can help you to solve your problems

Another day (or same day), another Hack The Box Academy lesson in the Network Foundations module. This time we are going to look at the…

I recently came across a research paper from Google DeepMind team called Defeating Prompt Injections by Design, and it made me rethink the…

Bug bounty programs offer a fantastic opportunity for security enthusiasts to test their skills, uncover vulnerabilities, and earn rewards…

One of the Most Infamous Hacking Incident in History

“Don’t reason by analogy. Boil things down to the most fundamental truths and reason up from there.” – Elon Musk In cybersecurity, it’s easy to fall into routine: follow best practices, install…

AI RISKS AND TRUST

Recon & Discovery Process

Why Startups Can’t Afford to Ignore Security

Siber güvenlik dünyasına ilk adımınızı attığınızda karşınıza çıkacak üç temel kavram vardır: Gizlilik (Confidentiality), Bütünlük…

Phishing still remains one of the major and most common attack vector in cybersecurity. As a part of my learning journey, I decided to…

Delving into the Handelling and Identification of Common Vulnerabilities and Weaknesses in Software

As the internet continues to evolve, security remains a cornerstone of user trust and data protection. If you’ve ever noticed that…

Practiced path traversal techniques to access unauthorized files, bypass input filters, and understand recursive and null byte exploitation

For decades, AI (Artificial Intelligence) was a cute little subject in computer science, and where researchers gathered together in mainly…