From a Simple Template Injection to Full DOM XSS — How I Chained CSTI, Vue.js, and JS Execution to Earn a Bug Bounty

The most important frontier of the Future?

“CVE List Keyword Search” on the CVE.ORG website has been updated based upon feedback from users. As a reminder, this search is for the CVE…

In a world increasingly reliant on digital communication, how do we ensure our private messages stay private? How can we be sure that the…

Autonomous Governance for Next-Gen Aerial Logistics By Aditiya Widodo Putra — Cybersecurity & BlockchainConsultant

Bismillahirrahmanirrahim

Between June 2024 and March 2025, a stealthy and coordinated campaign tied to China-nexus threat actors quietly breached over 70…

AI isn’t just powering your favorite apps…….it’s also becoming a weapon in the hands of cybercriminals. In today’s digital landscape, where…

In today’s rapidly evolving cloud landscape, security is more than just a layer — it’s a continuous process that needs to adapt to the…

When it comes to cryptography, the FDA’s expectations are nuanced and center on demonstrating a “reasonable assurance of safety and…

🚨 Mau Jago Cybersecurity Tapi Dompet Tipis?
 Tenang, Bro ! 😎

Join me as I tackle the eJPT one topic at a time. CTF Host and Network Penetration Testing: System-Host Based Attacks CTF 1.

A high-severity flaw (CVE-2025-37100) in HPE Aruba Private 5G Core allows unauthorized access to sensitive system files. Update to 1.25.1.1 immediately!

Apache CloudStack LTS updates patch five security flaws, including two critical vulnerabilities in Kubernetes and admin access, risking full system compromise.

A critical Konsole vulnerability allows arbitrary code execution via a telnet:// URL scheme. Linux users must update to 25.04.2 immediately.

Join me as I tackle the eJPT one topic at a time. CTF Host and Network Penetration Testing: System-Host Based Attacks CTF 2.

This story’s origins are rather mundane, but led me down a path that taught me a lot about obfuscation, and evasion techniques when dealing…

Welcome back, oh fearless network explorer! 🎉
 If you’re here, you’ve already survived Part 1, where we unlocked the basics of Nmap like…

Segurança em Aplicações

Transportation is undergoing a major transformation — and at the center of this change is Artificial Intelligence (AI). From easing traffic congestion in crowded cities to enabling cars that drive…

This write-up will show you how to investigate this alert associated with a malware that triggered the AV/EDR. Before we start, we must go…