In this blue team exercise alert was triggered with rule name SOC146 Phishing mail detected Excel 4.0 macros. If we look at the expanded…

Cyber threats are evolving everyday, meaning our approach against them must evolve too. There are couple of ways to better understand…

A critical remote code execution vulnerability in Wing FTP Server (CVE-2025–47812) is now being actively weaponized in the wild. Security…

In this article I will go through the retired Windows machine “EscapeTwo” from HackTheBox. The machine provides us with credentials at the…

Catch critical misconfigurations and vulnerabilities in your pull requests — without adding complexity for your developers.

Microsoft’s July 2025 Patch Tuesday represented a critical cybersecurity milestone, addressing an extensive array of vulnerabilities…

From discovering hidden pages to leaking API keys — a real-world playbook using target.com

As mobile app penetration testers, we often rely on Burp Suite to intercept HTTPS traffic from Android applications. However, as security…

Welcome back, scan-slingers! If Part 2 made you feel like a cyber-ninja, then Part 3 turns you into a full-blown cyber-wizard, armed with…

Scapy is one of the most powerful tools in a hacker’s arsenal. It’s not just a packet sniffer — it’s a full-blown framework that lets you forge, dissect, inject, and manipulate packets with surgical…

To understand how to write better reports, we first need to understand what triagers face daily. Find out true stories and insights.

AI is reshaping software development, enabling teams to generate and deploy code at a pace we’ve never seen before. But in this race to…

How to build secure software pipelines without slowing down delivery.

When I first set out to build a secure login system using Flask, I thought it’d be a quick weekend trip. Something clean, something cool —…

CRYPTOGRAPHY: HASHING

The Harsh Reality: You’re Not Too Small to Be a Target

This challenge was designed to have contestants work through a range of scenarios including Reconnaissance and Networking, Forensics, Web…

Hello! My name’s Gurnoor and I’m a high school student who recently took her first step into the exciting world of cybersecurity. Just…

Hey Bestie! 👋 Before you roll your eyes at the name — yes, it does sound like something out of an action movie. And honestly? You’re not…

Everything you need to move from clicking to command-lining — with real use cases for hacking and recon.

Soooooo — here is a secure code analysis roadmap, it could be short, but probably is going to be long, so sorry not sorry :)