It’s Friday, but we’re here today with unscheduled content - pushing our previously scheduled shenanigans to next week.

Fortinet is no stranger to the watchTowr Labs research team. Today we’re looking at CVE-2025-25256 - a pre-authentication command injection…

Introduction: The Opportunity of a Lifetime

By Rajkumar Kumawat  Ethical Hacker | AI Builder | GitHub | LinkedIn | Medium

I’ve been diving into the security of a web application recently, and what started as a routine look at its file upload flow turned into a…

Two years ago, while testing a web application, I discovered an interesting **Reflected Cross-Site Scripting (XSS)** vulnerability.

Subtitle: When Input Sanitization Fails to Show Up for Work

This guide explains basic server-side template injection (SSTI) in Ruby’s ERB engine, showing how an injection flaw can allow attackers to…

Sometimes, the best vulnerabilities are hidden in plain sight — or rather… hidden in HTTP headers! 📡  This is the story of how I…

Durante meus estudos de aprofundamento em XSS, me deparei com uma forma divertida de dar bypass em limite de caracteres de um input.

Greetings fellow hackers, my name is Sandy, InfoSec Consultant and Bug bounty hunter.

Natas 6 Walkthrough:

Say “hacking” and most people think of stolen data, compromised accounts or a hooded figure in a dark room. That’s one part of the story…

A Home Lab Dedicated for Ethical Hacking (Vulnerability Scan)

Cybersecurity isn’t just about putting up defenses — it’s also about understanding how attackers actually operate.
 That’s where the MITRE…

Emerging in early 2025, the Crypto24 ransomware group has rapidly distinguished itself as a high-sophistication, double-extortion…

A newly identified Android threat, known as PhantomCard, is redefining the scope of mobile banking attacks in Brazil by exploiting Near…

By Gba Henri Joel aka LBX18

🔐 Welcome to Day 1 of my 30-Day Cybersecurity Awareness Series!
Over the next month, I’ll break down complex security concepts into…

Introduction — Why Password Strength Matters

Walking the Business Hall at Black Hat USA 2025, attendees were greeted by more than 400 vendor booths — a bustling showcase of…

Practical tips for designing training programs that engage operators and engineers.