Exploiting a pattern in endpoint naming led to full unauthenticated access to sensitive country-level dashboards on a government system.

1. Introduction to ZoomEye for Advanced Reconnaissance

During a routine bug bounty hunt, a strange subdomain caught my eye — one that used WebSockets for authentication.

In part 1, we introduced GraphQL, explored why it’s gaining popularity, and examined its security implications. We also covered the basics…

Why Your Frontend Can’t Talk to Your Backend

Read These 3 Books and Then We’ll Talk

Introduction

Researchers at Cyble Research and Intelligence Labs have identified a new Android banking Trojan called RedHook actively targeting…

A Deep Dive into PCAP Analysis and Attack Reconstruction

July 2025 has seen a marked acceleration in cyber risk, blending state‑sponsored intrusions, AI‑driven threat innovation, and ransomware…

Artificial Intelligence (AI) has moved from research labs to boardrooms, powering everything from financial fraud detection to predictive…

The cybersecurity landscape is a relentless, ever-evolving battlefield. As threats grow more sophisticated, the demand for skilled security…

In our increasingly connected world, where digital interactions permeate every aspect of our lives, the need for robust cybersecurity…

When I first heard people say they were “in tech,” I wasn’t even sure what that meant. I didn’t study computer science. I had no background in anything tech-related. But I was curious. And that…

Everyone knows that incognito mode doesn’t save local browsing history. But did you know your ISP, employers, and even advertisers still…

By Che Chalk

Bu yazıda TryHackMe’deki Chocolate Factory adındaki odayı çözeceğim.

This writing is to help me solving the challenges in the Revenge room. The difficulty rating of this room was ‘Medium’. I used the…

“You receive an email that looks familiar — maybe even urgent. A PDF attachment labeled ‘Invoice’ urges you to take action. Is it real or…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread