Introduction

I invested $86,000 worth of USDT into a stock market trading app, believing it to be a legitimate opportunity for me to make profit. It…

TLDR: Foothold — SMB enumeration + WordPress plugin RCE; Privesc — AlwaysInstallElevated + MSI payload file

How ERMAC 3.0’s Public Source Code Unleashes a Banking Trojan Epidemic

It began with a simple Google search: “free ChatGPT online.” Within moments, the user landed on a convincing site-only to have their system…

This is the official write-up for the Magnolia challenge from SWU CTF 2025. If you’re looking for the longer version, written as a…

Think back for a second. Do you remember every single app, trial, or cloud service you ever signed up for?

Cookies, keys, and the coming quantum threat

Guida pratica per piccole e medie imprese

Overview

Walkthrough for Zero Health Security Challenges (Created by Aliyu G.)

Reclaiming Your Digital Identity: The Shocking Truth About Data Brokers The quest for privacy in a digital world can feel like an impossible battle. We are constantly connected, and every click…

Are we ready for AI as it evolves to influence or drive business leadership roles?

Cyberattacks are growing in frequency and sophistication, targeting organizations of every size. A single breach can lead to financial…

Today as enterprises deploy autonomous AI agents to drive innovation and efficiency, they simultaneously introduce a new class of…

This is a walkthrough of Wireshark: Traffic Analysis from TryHackMe

Ignite (Fuel CMS) is a beginner-friendly TryHackMe room that showcases web exploitation, remote code execution, and multiple privilege…

Hello everyone!

GitLab Vulnerability: Countering XSS Attacks

Uncovering and Mitigating a Hidden JavaScript Vulnerability in Shopify’s Judge.me App

Welcome to this new Medium post, in this one we will set up a simple C2 Server where powered by AI, in this case to detect if any security…