“The best way to learn hacking… is to hack! But only in a legal lab you control.”  — Rajkumar Kumawat

They said Linux doesn’t need an antivirus… so I gave it a reason to

“Arch isn’t hard. It just doesn’t pretend for you.”

During a security assessment of Target.com, I discovered a critical Insecure Direct Object Reference (IDOR) vulnerability affecting user account management. By manipulating user IDs in privileged API…

Legal and Ethical Disclaimer:

Hi everyone 👋,  In this article, I’ll walk you through a real experience I had while hunting for bugs on a public bug bounty program. The…

Writeup of the “Brainstorm” machine of tryhackme

In today’s digital world, nearly everything is connected to the internet — from phones and TVs to banks, hospitals, and even refrigerators. With this convenience comes a risk: the possibility of…

Artificial Intelligence systems have begun to be used across all sectors and fields today. Autonomous systems powered by decision-support…

Your essential roadmap to protecting Kubernetes environments from modern threats in 2025.

SOC Lab Topology

The evolving landscape of vulnerability intelligence demands more than CVE monitoring — discover how to build a resilient, multi-source…

How business teams are building their own “governance” — and what auditors must do about it.

The Atomic macOS Stealer (AMOS) has undergone a significant and concerning evolution, now incorporating a persistent backdoor into its capabilities. Previously known primarily for its role as a data…

The word security has become a global buzzword in today’s world. Every company wants to secure their products, services, and other assets…

Writeup for Jurassic Park CTF.

Binary number system and logical addressing

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

GPOHound analyzes GPOs in Active Directory for misconfigurations and privilege escalation paths, integrating with BloodHound for enhanced security insights.

Huntress witnessed active exploitation of a critical RCE flaw (CVE-2025-47812) in Wing FTP Server, allowing root/SYSTEM access via null byte injection and Lua code execution.

Juniper warns of a critical flaw (CVE-2025-52950, CVSS 9.6) in Security Director 24.4.1, allowing unauthenticated attackers to read or tamper with sensitive resources. Update immediately.