When it comes to security testing, the password reset flow is one of those places where developers cannot afford to make mistakes. A single…

Learn how CL.TE request smuggling works, why it’s dangerous, and how attackers exploit server parsing differences.

Hey everyone! 👋  I’m @horamah.71 , and I recently started exploring web security and SharePoint environments. I’ve been doing hands-on…

بسم الله الرحمن الرحيم

How I Found a $750 Vulnerability by Thinking Like a Business User

1. Pendahuluan

1️⃣ What is Email Phishing in the Corporate Context?

Welcome to the WhyWriteUps articles, where we explain every step we made and why we made it. I have been solving machines for quite a bit…

In the rapidly evolving landscape of mobile security, implementing robust cryptographic solutions has become paramount for protecting…

The Burp Suite by Portswigger (https://portswigger.net/burp) is a fantastic tool to use for Web Application Penetration Testing but also…

A server hack is when an attacker gains unauthorized access to a computer or software service that runs on a server (web servers, database servers, mail servers, file servers, cloud instances, etc.)…

👉 What’s going on in the cyber world today?

Hi there! I’m Vedant, a recent graduate specializing in cybersecurity, and a fresh face in the SOC world. Backed by my Microsoft SC-200…

The dark web is more than a shadowy corner of the internet — it is a complex ecosystem where anonymity shapes both risk and opportunity.

As modern development moves rapidly, so do threats. Developers rely heavily on open-source components — but with Great Power Comes Great…

A cybersecurity expert’s journey through the Tor network, underground markets, and the real cost of anonymity

In this second Special Lecture on 13 August 2025, Mr. Muhammad Ghifar Azka Nurhadi as a Security Consultant at NHSC Inc. Delved into the…

The breach is confirmed. Your CISO’s phone buzzes with a notification, and the clock starts ticking. In the boardroom, you have a…

It used to be that ransomware was a one-step crime. An attacker would encrypt your files and demand payment for the decryption key. That…

Every search, click, and swipe leaves a trace. Governments, corporations, data brokers, and even malicious actors are constantly collecting…