This is part 2 of a 3 part post documenting my experiment using AI for Security Operations. If you haven’t read the first part, that’s…

Simple, actionable cybersecurity habits that protect your devices, accounts, and personal information from online threats.

In B2B tech sales — especially in IT and cybersecurity — it’s easy to track activity, but much harder to track metrics that truly…

In today’s volatile business environment, enterprises face ever-increasing risks from disruptions, regulatory changes, cybersecurity…

Full Walk-through (Beginner-Friendly Boot2Root)

A local privilege escalation flaw in PyInstaller (CVE-2025-59042) could let attackers execute code. Check if your apps are at risk.

A new report reveals a Chinese APT group compromised a Philippine military company with a fileless malware framework called EggStreme, which uses DLL sideloading for stealth.

AhnLab has uncovered BlackNevas, a new ransomware group with strong encryption. The group is attacking businesses and critical infrastructure across the globe.

A new report reveals a ToneShell backdoor from Mustang Panda. The malware targets Myanmar and uses anti-analysis tricks to evade detection.

Zscaler has uncovered kkRAT, a new malware targeting Chinese-speaking users. The RAT steals crypto, hijacks clipboards, and uses RMM tools for covert, long-term control.

Aprende a usar Wfuzz, la herramienta clave para el fuzzing web en ciberseguridad. Descubre directorios, archivos y vulnerabilidades.

Writeup of the “El Bandito” machine of tryhackme

A few days ago, a supply chain attack hit NPM, compromising over a dozen widely used packages, including chalk, debug, and ansi-styles. The…

Researchers uncovered a wave of brute-force and password spraying attacks against SSL VPN and Remote Desktop Protocol systems between June…

In a world increasingly defined by data breaches, surveillance capitalism, and fractured digital identities, one question persists: How do…

Over a few weekends, I reviewed 866 AI incidents from incidentdatabase.ai. The dataset covered complete entries for the MIT AI Risk Domains…

It’s not the tools — it’s the mindset. Are you missing what really matters?

Why Repository Security Is Critical in 2025

How to Find Hidden Vulnerabilities Without Spending a Dime

Staying Safe in a World of Digital Shadows

Laboratorio de DFIR de la plataforma de HackTheBox