In short, today’s news paints a picture of a world teetering on the edge of hilarious chaos and utter digital annihilation. From AI thwarting attacks to massive funding rounds for security firms…

1. June

🔧 Alət: Dmitry
🗂 Kateqoriya: Reconnaissance / Network Information / Dmitry

Como su nombre lo indica, en esta ocasión hablaremos de la enumeración de usuarios a través de las diferentes respuestas que proporciona el…

Welcome back to our pentesting series! In Part 2, we take on a new target: Observer — a Linux machine that’s a little more locked down…

When we talk about web vulnerabilities, Cross-Site Request Forgery (CSRF) often gets pushed to the background in favor of flashier bugs…

When it comes to API security, most minds jump straight to authentication and authorisation at the endpoint. And while crucial, these are…

On June 13, 2025 was disclosed vulnerability in the iOS version of the Air Keyboard app that exposes users to remote input injection over Wi-Fi. The flaw, documented in CXSecurity Report, allows an attacker on the same local network to send keystrokes to…

AWS unveils Bedrock AgentCore, expands its Generative AI Innovation Center with $100M, and launches an "AI Agents and Tools" Marketplace category to accelerate enterprise AI adoption.

Elon Musk's xAI is in talks with Saudi Arabian entities, including PIF-backed Humain, to lease vast data center capacity for its large-scale AI models, eyeing global expansion.

Early in my bug hunting journey, I made a rookie mistake —

Hey there!😁

Hi Bug bounty hunters,

One of the most overlooked changes in a web application is also one of the most dangerous: a page that used to return 404, silently coming…

The .git directory — a hidden folder that holds the entire version history of a project — is often mistakenly deployed to web servers…

Google Dorking, also known as Google hacking, is the art of using advanced search operators to discover sensitive information that is…

“En el bug bounty, el mejor hallazgo no viene de acumular datos, sino de encontrar la historia que esos datos quieren contarte.”

Image uploads seem innocent. A user drops in a photo, your app compresses it, and boom — done. Right?

INFORMACIÓN DE LA MÁQUINA

In this blog, we’ll cover some of the most important building blocks of cybersecurity. The CIA Triad, common cyber threats and types of…

The irony of a cybersecurity company falling short of modern digital security expectations is not just striking — it’s dangerous. In a…