That is my update! This week, I started the Core 2 courses and I’m already half way through, but the highlight of my week was doing the…

Investigating a Compromised Web Server Using Velociraptor, Wireshark, and Cyber Threat Intelligence.

Lightning the Path: OSINT Case #32

Goal & Overview

As part of my OSCP+ preparation, I have been practicing on HackTheBox machines to sharpen my penetration testing methodology. Recently, I…

Intermediate level binary exploitation challenges.

In this section, we’ll look at some of the major projects and research that the U.S.-based non-profit MITRE Corporation has created for…

Introduction

⚠️ Disclaimer  This walkthrough is intended strictly for educational purposes. It does not provide direct answers, flags, or spoilers to…

Microsoft is giving a free one-year subscription to Microsoft 365 Personal to all U.S. university students, including access to Copilot and 1TB of storage.

Apple is set to unveil the iPhone 17 Air, an ultra-thin phone with a single camera and potentially a small battery. Is the trade-off for design worth it?

Qualcomm's CEO says Intel's foundry technology isn't advanced enough for its needs, signaling continued reliance on TSMC and Samsung for chip production.

Apple's new iOS 26 beta finally removes the 1920-pixel cap on screen recordings, allowing you to capture full-resolution video on your iPhone.

A new report reveals Noisy Bear, an APT group targeting Kazakhstan’s oil and gas sector with spear-phishing and multi-stage malware, mimicking internal communications.

Progress Software has patched a high-severity RCE flaw (CVE-2025-7388) in OpenEdge AdminServer. The bug allows authenticated attackers to execute commands via Java RMI.

A new botnet, NightshadeC2, is using a technique called "UAC Prompt Bombing" to bypass sandboxes and Windows Defender by relentlessly looping UAC prompts.

A high-severity flaw (CVE-2025-9566) in Podman allows malicious containers to overwrite host files via a symlink traversal attack. A patch is available in Podman v5.6.1.

A new report reveals how a compromised AWS key was used to bypass security controls in Amazon SES, enabling a 50,000-email-per-day phishing campaign.

A critical flaw in the cJSON library (CVE-2025-57052) allows attackers to bypass array bounds checking with a malformed JSON pointer. The bug has a CVSS 9.8 score.

Anthropic has agreed to pay a record $1.5 billion to settle a lawsuit with authors who accused the company of using their books to train its Claude model.

How I Automatically Find Exposed AWS S3 Buckets