Disclaimer: The following is a personal thought experiment. The views and proposals shared here are my own and do not reflect the views or…

Imagine logging into your favorite app — only to find your account hijacked minutes later.

Get Answers No One Else Gets (Steal this)

> ”Conhecimento, paciência e persistência quebram qualquer cifra fraca.”

Your go-to handbook for setting up a SIEM that helps detect and stop threats in 2025.

I have had this paid Medium subscription for at least two years, but haven’t been using it. Today marks a new departure. Instead of posting…

A (Very) Cheap Discovery

Three actionable steps you can take to improve your cloud security

Author: Amirhossein Shekooh
 BSc Cybersecurity | Volatility | Digital Forensics | Malware Analysis
 Published: June 2025

By Aditiya Widodo Putra — Cybersecurity & Blockchain Consultant

To access the machine, click on the link given below:

TryHackMe’s Industrial Intrusion OSINT challenge guide

Jxscout is a new tool for security researchers, analyzing JavaScript code for vulnerabilities. It works with proxies like Burp/Caido, offering beautification, source map discovery, and AST analysis.

A critical flaw (CVE-2025-6328) in D-Link's EOL DIR-815 router allows remote code execution via a stack-based buffer overflow. No patches will be issued.

Citrix Bleed 2 (CVE-2025-5777, CVSS 9.2) is actively exploited to hijack sessions and bypass MFA on NetScaler ADC/Gateway. Patch immediately to prevent covert access and data theft.

Six critical flaws in D-Link's EOL DIR-816 routers are exposed. No patches will be issued; replace device immediately to avoid remote code execution.

Sucuri uncovers a complex multi-stage malware campaign infecting WordPress sites via header.php to deliver a hidden RAT (client32.exe) and evade detection.

Meta AI is testing a feature to access unuploaded photos from your camera roll for content suggestions, sparking privacy concerns despite claims it's opt-in and not for ad targeting

A flaw (CVE-2025-4679) in Synology ABM leaked a static client_secret, allowing unauthenticated attackers read-only access to all Microsoft 365 tenants with ABM installed.

Google launches Doppl, an experimental AI app in the US. It creates personalized digital avatars for virtual try-ons and animated videos of users wearing different outfits.

ASEC uncovers sophisticated attacks targeting South Korean Windows IIS and Linux systems, deploying WogRAT, MeshAgent, and SuperShell for cyber-espionage and lateral movement.