Cyber risk is now a business risk. That’s why NMT Security and AU Bank have teamed up to bring Indian businesses a powerful combination…

I’m excited to share that I have successfully earned the Hack The Box Certified Penetration Testing Specialist (CPTS) certification. This…

A JWT (JSON Web Token) is an open standard for securely transmitting information between parties as a JSON object. It contains claims —…

Hello,This is Salma Mohamed. I will be walking through a series of interesting web application security challenges, authored by 0xMesbaha…

Hello everyone, I’m Firda Nurelia (find me on LinkedIn). Today I’m sharing a concise write-up about a stored HTML injection I found in a…

It’s a private program so we’ll use redacted.com.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Welcome back, and what a week! We’re glad that happened for you and/or sorry that happened to you. It will get better and/or worse, and you will likely survive.

Today, we’re walking down the garden path and digging into the archives, publishing our analysis…

Minimal Docker-based bug hunting starter stack built with FastAPI and a background worker process.  Designed for security researchers…

link Room — https://tryhackme.com/room/howwebsiteswork

A Beginner-Friendly Guide to Ransomware-as-a-Service Without the Jargon

The web may hide its secrets, but mobile apps often leak them in plain sight

TLDR: Foothold — Custom web app + web enum + SQLi webshell; Privesc — NIL

pwn college dealing with data room writeup

In late September 2025, Unity quietly dropped a bombshell: a serious vulnerability affects every Unity version from 2017.1 onward across…

When hardening Linux servers, most people focus on SSH, firewalls, or logs.  But one often-overlooked weakness sits right at boot time…

I’ll never forget the panic in the CTO’s voice when he called me at 11 PM on a Friday.

Understanding Strong Passwords and Managers: Definition and Techniques

Deploying a Router, Firewall, and VPN Concentrator

It’s every professional’s nightmare. You’re waiting for that client reply, an invoice confirmation, or even a critical password reset. But…