For decades, AI (Artificial Intelligence) was a cute little subject in computer science, and where researchers gathered together in mainly…

So, it’s 2025, and suddenly you’ve decided you want to be an ethical hacker or a cybersecurity expert. Maybe it’s because you watched some…

Summary

At this point in life, bad situation emerge for us to learn our mistakes and figure out what next is to be done. I’m really delighted I eventually found a real competent hacker after been spammed by…

This is for educational purposes only.

Hands-on SQL injection testing on DVWA in Metasploitable using Burp Suite and sqlmap for ethical hacking

A Windows Registry forensic investigation using Eric Zimmerman’s Registry Explorer, ShellBags Explorer, AppCompatCacheParser, and…

From log collection to threat detection — learn how to effectively deploy SIEM to strengthen your security posture.

Welcome to the part of cybersecurity where no zero-day vulnerability is required just a convincing email and a human who’s a little too…

Day 21: Mobile Application Testing

In this article, we’re going to explore the retired easy box of Netmon, following the guided mode.

Carseat is a Python-based tool that implements most of Seatbelt's security checks with remote execution capabilities for host analysis.

Live Forensicator is part of the Black Widow Toolbox, its aim is to assist Forensic Investigator and Incidence responders

CVE-2025-46762 in Apache Parquet Java enables code execution via malicious Avro schema metadata. Upgrade to 1.15.2 or harden deserialization settings.

Arctic Wolf exposes Venom Spider’s More_eggs campaign, where fake resumes and polymorphic JavaScript target HR to deploy a stealthy backdoor.

CVE-2025-46337 is a critical SQL injection flaw in ADOdb's PostgreSQL driver. Patch to version 5.22.9 or sanitize input to avoid exploitation.

Bridewell uncovers Operation Deceptive Prospect, a RomCom campaign using fake customer feedback to deliver malware via spoofed cloud storage links.

ThreatLabz reveals StealC V2—an evolving info-stealer with encrypted C2, MSI and PowerShell payloads, and a rule-driven control panel for targeted attacks.

CVE-2024-38475 and CVE-2023-44221 form an exploit chain targeting SonicWall SMA appliances, enabling remote admin hijack and code execution.

Seqrite Labs uncovers APT36 phishing campaign using Pahalgam terror attack-themed lures to deploy Crimson RAT against Indian government targets.

Recorded Future uncovers TerraStealerV2 and TerraLogger—two new malware families from Golden Chickens, aimed at stealing credentials and logging keystrokes.