Discover how outdated libraries and frameworks are entry points for RCE and data leakage. Protect your systems!

Detectar quién borra archivos en S3 puede ser clave para la seguridad; aquí resumo las mejores formas de lograrlo.

Starting from the beginning, can get you closer to the end

If you’ve landed here, you’re probably dealing with a lost wallet, scam, or blocked crypto funds — and wondering what to do next.

How a simple delivery notification sent me down a rabbit hole of cybersecurity, government agencies, and the exhausting reality of digital…

I’m back, and this time I’m going to share my thoughts on the lessons I've learned. First off, I owe you all a reintroduction, and here it…

Flash USDT is a term used to describe fake USDT wallet reflections that don’t involve real blockchain transactions. These can be created…

If you have the resources, aim to do both at the same time, as there’s a lot of overlap between them

Clorox is suing IT provider Cognizant for $380 million, alleging gross negligence in an employee password reset led to a devastating 2023 cyberattack by Scattered Spider.

Imagina que pudieras dar instrucciones secretas al sistema operativo y obtener el resultado sin ningún tipo de filtro, utilizando un canal…

How Fake Dalai Lama Apps Were Used to Spy on the Tibetan Community

A Newly Crafted Social Engineering method as of April-July, 2025

“APT actors don’t break in — they log in. The question is: are you watching?”

Healthcare organisations face deep challenges today as they operate in most vulnerable digital environments, such as:

Let’s Defend is an interactive, hands-on training platform focused on Blue Team (defensive cybersecurity) operations. It simulates a…

Let’s Defend is an interactive, hands-on training platform focused on Blue Team (defensive cybersecurity) operations. It simulates a…

Let’s Defend is an interactive, hands-on training platform focused on Blue Team (defensive cybersecurity) operations. It simulates a…

If you’re running a financial institution or managing student financial aid, the Gramm-Leach-Bliley Act (GLBA) is more than a regulatory…

TL;DR walkthrough of the K2 Middle Camp portion of the K2 room. This is part 2 of 3 on the K2 room. Due to my suckiness at webapps there is…

Sometimes, the most powerful bugs don’t hide behind layers of complexity— they sit quietly in the open, waiting for someone to ask the…

Recently, while auditing an application’s authentication mechanisms, I unearthed a subtle but serious flaw in the way it handled One-Time…