The Kitten Video that Stole Grandma’s Fortune

Today, I spent time studying vulnerability management, and I was reminded of a key truth in cybersecurity: attackers never stop researching, so defenders cannot afford to stop either. At its core…

Welcome to the System-Host Based Attacks Capture the flag! The previous System-Host Based Attacks target was a windows system, now we will…

Opening Note — Why This Drill Matters

Prompt Injection in AI

Hi Friends! Welcome back, here’s to a new week of crazy things happening around the world. If you have any tools for survival or other…

From One-Liners to AI-Powered Assaults: How to Automate the Discovery of Novel Bypass Techniques

The Series Finale

When you’re on SOC duty, every shift is like being trapped in Squid Game — most rounds are harmless kids’ games, but every so often a…

TwoMillion is an Easy Linux box released to celebrate HackTheBox reaching 2 million users. It walks through web enumeration, API…

This article explores zip smuggling, a stealthy technique that embeds hidden data within a zip file using a Windows LNK file. Learn how it works.

Introduction

Open source intelligence (OSINT) is not just about searching for information. It is about navigating a digital maze where every nickname…

This month, I had the privilege of being featured in Cyber Defense Magazine’s August 2025 Edition with my article:
 “Inside the Mind of a…

Learn the fundamentals of EDR and explore its features and working.

Cybersecurity isn’t just a career — it’s a battlefield. Most beginners jump in thinking it’s all about flashy tools, coding tricks, and…

In this walkthrough we will be going through the Beanstalk_Secrets scenario from Cloudgoat. We will go through this manually using the AWS…

IBM has issued a security advisory for a SQL injection flaw (CVE-2025-0165) in watsonx Orchestrate. The high-severity bug could allow attackers to manipulate backend databases.

A high-severity DoS flaw (CVE-2025-58047) in Volto, the frontend for Plone CMS, allows an unauthenticated user to crash the server with a single crafted URL.

A new report reveals that the AppSuite PDF Editor is a Trojan horse that functions as a backdoor. Its developers even submitted it to AV vendors to get it whitelisted.