Your clicks, your data, their profit — here’s how ‘free’ apps are mining your life.

Login pages look boring, but they’re goldmines for OSCP students and pentesters. If you’re staring at a web login form, here are the two…

🔍 SMB & NFS Enumeration — No Fluff, Just Commands

The French Open Source Intelligence Survival Kit — Tips, Tools, Techniques, & the Ultimate Website Directory for France-Focused…

In today’s data-driven business environment, ensuring compliance with the General Data Protection Regulation (GDPR) isn’t just a legal…

A Step in the Right Direction

PicoCTF Basic Challenge:

The OSWE (Offensive Security Web Expert) is a hands-on certification focused on source-code-assisted web application exploitation.
 In…

In cybersecurity, waiting for a breach to act is too late.

Introduction:

I came across a new tool—Androidmeda—that caught my attention. It attempts to deobfuscate decompiled Android code using a large language model (LLMs). I decided to give it a try, and to my surprise, the results were far better than expected.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Backslash Security warns that Cursor AI's "YOLO mode" (unsupervised execution) has easily bypassed safeguards, risking file deletion, arbitrary code execution, and data compromise via simple command obfuscation.

Following a ProPublica report and Pentagon backlash, Microsoft will no longer allow China-based engineers to support US Department of Defense cloud systems.

Apple Wallet now integrates with South Korea's Tmoney card. Commuters can tap to pay for transit and make purchases with their iPhone or Apple Watch, even with a depleted battery.

Recon is one of the most important steps when you’re looking for vulnerabilities. I use several tools in my workflow to speed things up…

Reconnaissance

This is my journey through all the easy machines on Vulnlab and it starts with Baby. I did them in order as they sit on the discord, so I…

Hear Ye! Hear Ye! A Bug Most Vile: The Buffer Overflow

My lawn looks like it has rained every day for the last three months. I may have cut more weeds today than grass, and the fungi in the…

This project performs a gap analysis on Best Buy’s Information Security Policy. The objective was to ensure alignment with PCI DSS 4.0