How I became the first Nigerian to earn the OSWP certification in a single attempt and what it means for cybersecurity in Africa?

Pacemakers are life-saving devices that help millions manage heart conditions by regulating abnormal heart rhythms. These small…

TryHackMe  I am currently ranked #810 U.S. All-time on TryHackMe and ranked #6366 in All-countries with a 32-day streak, 263 rooms…

Overview

Introduction

CVE-2015–0311: A Deep Dive into Adobe Flash’s Critical Use-After-Free Vulnerability

I’ve been watching the rise of AI-assisted coding tools like ChatGPT with equal parts fascination and concern. On the surface, the promise…

I have noticed a clear dividing line between good pentesters and truly elite ones — and it often comes down to low-level knowledge. Most…

Walkthrough for Gandalf AI challenge

How to track, document, and prepare for the newest nation-state and cybercrime operations in 2025.

As a pentester, I’ve always leaned heavily on Python for rapid scripting, automation, and proof-of-concept exploits. It’s been a loyal tool…

HackTheBox Artificial Walkthrough: Exploiting TensorFlow RCE for Web Shells and Linux Privilege Escalation

ThreatFabric researchers have uncovered PhantomCard, an Android Trojan that uses an NFC relay attack to steal contactless card data and enable fraudulent payments.

Trend Micro research exposes Crypto24, a coordinated ransomware operation that uses legitimate tools, custom malware, and advanced evasion tactics to breach and extort victims.

Apache Tomcat has released updates for two serious flaws: a session fixation vulnerability and a "MadeYouReset" DoS vulnerability affecting multiple versions.

A new vulnerability, "MadeYouReset," has been discovered in HTTP/2, allowing attackers to exploit stream resets to launch devastating denial-of-service attacks.

Google Play now requires custodial crypto wallet providers in 15+ jurisdictions to obtain licenses. Non-custodial wallets are exempt from the new rules.

Microsoft has permanently removed the outdated and insecure PowerShell 2.0 from Windows 11, a move that enhances security but may affect some enterprise scripts.

An Ethereum developer lost funds to a fake AI extension that stole his private key, highlighting how even experts can fall victim to sophisticated phishing attacks.

A 2017 Microsoft Office flaw, CVE-2017-11882, is still being exploited by attackers, proving that outdated software remains a major security risk.

Microsoft's Universal Print Anywhere is now available to all users, offering a secure cloud printing solution with QR code authentication to prevent data leakage.