On a sale of 1–10.

VIDAR is a C++ based data stealer designed to extract sensitive information from multiple web browsers, cryptocurrency wallets, chat…

Learn how SSRF allows an attacker to access the internal network, read cloud metadata, and escalate privileges.

This is a real life story!

Appshark is a static taint analysis platform to scan vulnerabilities in an Android app. It supports Flexible configuration

Eleven malicious Go packages have been found to target both Windows and Linux, deploying payloads from C2 servers in a stealthy supply chain attack.

As families across India prepare to celebrate Raksha Bandhan, cybercriminals are also gearing up — not with gifts, but with fraudulent campaigns designed to steal money and personal data. In a rec…

The Python Package Index (PyPI) has announced a set of new upload restrictions aimed at protecting Python package installers and inspection tools from ZIP parser confusion attacks. This move follo…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a risk evaluation warning about multiple high-severity vulnerabilities affecting all versions of several EG4 Electronics…

A practical guide to understanding DNSSEC, the bodyguard of DNS, what it is, how it works, and why it’s a big deal in securing DNS records.

Introduction: Why Start with Free Tools?

Vladimir Tsakanyan

As part of an ongoing performance optimization and troubleshooting session for one of our high-traffic production workloads in AWS EKS…

Before the first exploit is launched, before the first password is cracked, before the first ransomware note appears on a victim’s screen —…

“If you want to keep a secret, you must also hide it from yourself.” ~ 1984

Learn what the CIA Triad is and why confidentiality, integrity, and availability are the foundation of modern cybersecurity defense.

Let’s get real about cybersecurity for a second. We’re all aware cyberattacks are getting sneakier by the day, right? That’s where the…

Tulisan ini saya buat khususnya untuk saya pribadi dan umumnya untuk pembaca. Saya membuat tulisan ini dikarenakan saya ingin mempelajari…

A while ago, I came across a web application where the UI looked bulletproof — it wouldn’t let you save an invalid email address. The front…

While testing a web application, I stumbled upon a subtle but dangerous flaw — one that could lock a user out of their account permanently with nothing more than a single unverified email change. I…

El equipo de ANDES Shield ha identificado y reportado una campaña activa de phishing dirigida contra usuarios de Celsia, empresa de energía…