In Part 1 we achieved an initial foothold on the target host (e.g. via a malicious macro or HTA). We now have a limited user shell. In this…

This is an unofficial guide to analyzing the SOC130 — EventID 64 — Event Log Cleared

If you’re passionate about malware analysis but unsure where to begin, here’s the truth: the best way to learn is to get your hands dirty…

A one-time security check is no longer enough In 2025 threats move too fast attackers are too smart and tech stacks change too often If…

When the CISO of JPMorgan Chase issues a public letter to all technology vendors, the industry pays attention — and rightfully so. In his…

Phishing emails are one of the easiest ways for attackers to steal your credentials or install malware. They often come from domains that…

Auto-Block Malicious IPs With Logs, AbuseIPDB, and n8n

🤔 What Is Cybersecurity?

Phishing is no longer just about sketchy emails or fake login forms. It’s evolving — blending technical trickery with psychological…

Saya tidak pernah menyangka bahwa patah hati saya di dunia perkuliahan akan menjadi motivasi saya untuk memperdalam dunia cybersecurity…

By Sachin Raut  Published on Medium

Creative is a fun challenge that combines file analysis, some SSRF, and an interesting twist at the end. If you’re looking for a task that…

welcome back!! Yesterday, I came across an old TryHackMe CTF room called DogCat. Little interesting and little bit enjoyed the challenge…

a medium difficulty machine which focuses on deserialization exploits. It is not the most realistic, however it provides a practical…

As a bug hunter, there’s nothing more thrilling than uncovering a flaw that could turn a secure system upside down. Recently, I stumbled…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

This is part of my NahamSec Bug Bounty course summary series.

Note

“When it comes to REST API design, there are varying opinions on what the ‘best’ patterns and architectures are. At the end of the day, the…

A positive Cyber Security Culture will not be developed until leaders set the right goals — and follow through.

Introduction: Cybersecurity Beyond Protection