AppSec IR Fundamentals

September 2025 was a watershed moment for the entire software development community. In the span of a few weeks, the npm ecosystem was…

This trick is called a prompt injection, and it’s one of the biggest headaches for anyone building LLM-powered apps today.

For Educational Purposes Only. Only scan hosts/networks you own or have permission to test.

What is SSRF?

The Day My Coffee Maker Tried to Hack Me

Software builds itself now. In the time it takes you to read this sentence, thousands of CI/CD pipelines have compiled code, run automated…

Lab: JWT authentication bypass via unverified signature

Does the Internet Run on Satellites? Let’s bust the myths and explore the real story.✨✨

How a single delivery failure notification revealed a multi-stage phishing operation spanning across multiple cloud infrastructure…

TL;DR Walkthrough of the TryHackMe Services room.

Read Part 1 here.

Neuralink will begin a new clinical trial in the US to test a brain implant that translates thoughts into text, aiming to help patients with speech disorders.

Task 1The Frosty Five

Threat Intelligence Analysis

Today’s Top Cyber Intelligence Highlights — Sep 21, 2025 Another Day, Another Dozen Disasters: A Roundup of Today’s Cyber Mayhem Global Airport Chaos: A Cyberattack Cripples Check-in Systems A …

This write-up will include my challenge Silhouettes

How to Recover Lost Money from Online Scammers in 2026 – The Fastest Method Have you ever fallen victim to an online scam? If so, you’re not alone. Every year, millions of people lose their …

Setup the env for the Volatility 2

Introduction