Securing the Digital World, One Project at a Time

How a 5-year-old deserialization flaw, a vacation phone call, and some persistence led to a safer Java ecosystem

Bisa nggak Nmap jalan di Android?

Have you ever come across a link promising a free $50 Steam Gift Card? I did — and instead of ignoring it, I decided to investigate. What…

Server-side code injection is a security problem that happens when a website or app lets users send in data (like text or numbers), and…

Just a few years ago, cyber attackers needed a lot of manual work to conduct broad cyber attacks. Attackers used tools like Shodan a search…

Let me tell you a story that should scare the hell out of you.

In a world filled with biometrics, AI-powered security, and multi-factor authentication, it’s hard to believe that passwords are still a…

Introduction

This article discusses a Microsoft Windows Active Directory vulnerability called “Bad Successor.” This vulnerability can allow an attacker…

Brute IT Challenge

How you could too.

🤔 Wait, That’s Not What I Said…

The cautionary tale of “nbusr123,” the admin credential that became a meme.

It started with a meditation bell. It ended with encrypted files, ransom notes, and a $35,000 BTC demand. Here’s how a feel-good app…

⚠️ When the Breakroom Became Ground Zero: A Cyberattack No One Saw Coming

hello everyone! 👋

Essential tools for OSINT investigators

Discover the 2025 bizarre cybersecurity threat that impacted X Business and learn essential cybersecurity tools, threat detection, and…

Discover how a bizarre 2025 cybersecurity breach exploited X Business’s outdated operating systems, and learn how modern tools and training…