100 Day Series — Cybersecurity from Scratch

Today I’ll be covering the new “Down” machine from HackTheBox. This machine was retired straight away, and is the first machine that has…

Writeup of the “Skynet” machine of tryhackme

For many years, I enjoyed my career in testing. I went through different roles in that specialty: test analyst, engineer, automation…

Before discussing different tools that are necessary for the URL analysis, I just want you to walk through the basic anatomy of URL.

By LCSC-IE, 17th June 2025

Streamline your ethical hacking process by automating key stages of penetration testing using Python.

Smart contracts have long been a battleground for both innovation and exploitation in the Web3 world. But as of 2025, a new breed of attack…

In an era where a click can cost a nation millions and a text message can plunge entire communities into chaos, Africa is walking a digital tightrope without a safety net. While mobile adoption…

Learn real-world techniques to secure your Windows domain against modern attacks using policy, least privilege, and smart architecture.

I was crushed when a shady platform took my money and left me unable to withdraw anything, plunging me into despair. Thanks to a friend at…

Kereva LLM Code Scanner is a static analysis tool for Python LLM code, detecting security risks, performance issues, and vulnerabilities like prompt injection.

Nightingale (Docker for Pentesters) contains all the required well-known tools that will be required for the Pentesters at the time of Penetration Testing.

CISA has added CVE-2023-0386, a critical Linux kernel OverlayFS flaw, to its KEV Catalog, confirming active exploitation allowing local users to gain root privileges.

Cloud Software Group issues urgent patches for two critical NetScaler flaws allowing access bypass and memory overread. Update immediately.

Veeam released a critical update for Backup & Replication, patching three flaws, including a CVSS 9.9 RCE (CVE-2025-23121) allowing authenticated users to execute code.

Google Chrome 137.0.7151.119/.120 is rolling out with crucial security fixes, addressing two high-severity flaws: an integer overflow in V8 and a use-after-free in Profiler.

WAGO Device Manager security updates address two vulnerabilities allowing unauthenticated remote access to sensitive system files.

Kimsuky APT is using HWP documents and stealthy AnyDesk backdoors in a new phishing campaign to infiltrate systems under the guise of academic collaboration.

Learn how to use Subfinder to list subdomains in Bug Bounty. A practical guide, examples, APIs, and automation.

So, your boss just dropped a bombshell: “We need ISO 27001 certification in 48 weeks, and you’re leading the charge.”