Attending DEFCON in Las Vegas this year felt like stepping into the epicentre of the cybersecurity world. It’s one thing to stay on top of…

Mobile threats are the ways hackers compromise smartphones and tablets to extort data, spy on users, or take control of devices. Hackers can target both consumers and organizations. •Malware…

DDoS is no longer just about taking you down — it’s the art of slowing your services. 1+ Tbps volumetric attacks routinely outpace ISPs’…

Protecting user data isn’t optional anymore—it’s survival. Here’s how to implement strong login systems that keep hackers out and trust in.

JWT is a compact, URL-safe token format used to securely transmit data between a client and a server. Each token consists of three parts…

"Know, Relate, and Understand "

Sometimes you might feel left out, like your friends aren’t really paying attention or there are some problems there. Maybe you’ve even…

Kadang dalam challenge CTF atau forensik, kita tidak diberikan file asli, melainkan hanya:

Pendahuluan: Memahami Kekuatan Informasi Publik

Why React apps still face SQLi

On new year’s eve 2024, exactly 2 years after buying PEN-200 (OSCP), I decided to take the leap of faith and purchase the Learn One package…

I’ve spent ~15 years in cybersecurity and ~4 years in AI/ML. This series distills what I wish I’d had on day one — clear, practical basics…

A Pentester’s Perspective on Smarter Pipelines

Security Awareness as the New Digital Literacy

This write-up covers my walkthrough of the ColddBox: Easy machine on TryHackMe. The challenge is a boot2root box that involves classic web…

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread