Recently, my GuideM Web Application & System Penetration Test Project has been approved.

Hi guys, today we will hack into Flu by Offsec PG. Juts another day preparing for the OSCP. This is a lab tagged as Intermediate and the…

AetherDesk Malware Analysis: A Write-Up for “The Payload” CTF
Welcome to my detailed analysis of the “The Payload” challenge. As a…

GuardDog is a CLI tool that uses heuristics and Semgrep rules to scan for malicious npm, PyPI, Go, and VSCode packages, helping to secure the software supply chain.

A new report exposes Vane Viper, a massive malvertising network that processes a trillion DNS queries, using push notifications and compromised sites to deliver malware and scams.

The Morte botnet campaign is exploiting command injection flaws to hijack SOHO routers and IoT devices for mining and Mirai-style attacks. The operation grew by 230% this summer.

LockBit 5.0 resurfaces with advanced Windows, Linux, and ESXi variants, boasting heavy obfuscation and anti-forensic techniques, making it more dangerous than its predecessors.

A new XCSSET variant targets macOS developers by infecting Xcode projects. It now steals Firefox data, hijacks clipboards for crypto theft, and enhances its persistence.

Singapore, Singapore, 29th September 2025, CyberNewsWire

A public PoC has been released for CVE-2025-24085, a zero-day flaw in Apple's Core Media framework that allows a malicious app to elevate its privileges. Update now.

Hey there!😁

If you’re a penetration tester or bug bounty hunter, never skip SSO in your tests. It’s one of those features that everyone assumes is…

In this writeup, I’ll walk you through how I solved the ToolsRus challenge on TryHackMe.

These aren’t just horror stories. They are the hard-won, multi-million dollar lessons that built the foundation of modern crypto security.

You’ve stress-tested your web server. It can handle thousands of simultaneous users. Your network pipe is wide enough for a massive traffic…

I’m Aryan Singh, a student at Boston Institute, and I recently completed the “Protecting the Future with Cyber Security” course. It’s been…

Hands-on Slowloris + volumetric lab with Snort, honeypots & WAF playbooks.

Artificial intelligence is changing how cyberattacks happen, making threats faster, smarter, and harder to detect. Attackers now use AI…

How invisible Unicode characters can carry hidden data — what that means for developers, security teams, and everyday users.

In the age of digital transformation, cybersecurity has become a cornerstone of business resilience. From startups to enterprises…

Daily Life = Daily Risk