IAM adalah singkatan dari Identity and access management, sesuai dengan namanya merupakan sebuah mekanisme untuk melakukan menejemen…

Let’s face it, if your business isn’t running on tech these days, you’re probably still using a fax machine. But when your whole operation…

Imagine downloading a new AI-powered productivity app that promises to make your life easier — but instead, it steals your data, spies on…

This guide outlines a five-phase, intelligence-driven framework for emulating a specific threat actor to rigorously test an organization’s…

Guía esencial para la resolución masiva de DNS, detección de takeovers y registros sensibles en flujos de trabajo de Bug Bounty.

Hello folks! It’s darksp1rit again with another walkthrough blog. Today we’ll go through the Damn Vulnerable Web Application’s Reflected…

Microsoft rolls out “Hey, Copilot” voice activation and visual context features in Windows 11. The assistant can now analyze your screen and automate system actions with optional Copilot Actions.

Spring fixed two flaws: CVE-2025-41253 allows SpEL injection in Cloud Gateway to expose secrets, and CVE-2025-41254 allows STOMP CSRF to send unauthorized WebSocket messages. Update immediately.

ConnectWise patched two high-severity flaws in Automate RMM. CVE-2025-11492 (CVSS 9.6) allows MiTM attack to intercept unencrypted agent communications and inject malicious updates. Update to 2025.9.

A new report from Cisco Talos has exposed a malware campaign linked to Famous Chollima, a North Korean threat group aligned with the Lazarus APT and known for its long-running job-themed espionage…

Cisco has released security updates to patch two vulnerabilities (CVE-2025-20350 and CVE-2025-20351) affecting multiple Cisco Desk Phone and IP Phone models, including the 9800, 7800, 8800, and 88…

Seqrite exposed Operation Silk Lure, a campaign using a malicious Chinese resume (.LNK) to implant ValleyRAT on FinTech systems. It achieves persistence via a “Security” scheduled task and uninstalls AV.

Resecurity exposed Qilin RaaS's reliance on bulletproof hosting (BPH) in Russia/HK. The same network was linked to the Asahi Group Holdings ransomware attack that stole 27 GB of data.

Kaspersky exposed Maverick, a sophisticated fileless banking Trojan targeting Brazil. It hijacks WhatsApp Web using WPPConnect for self-propagation and installs phishing overlays to steal UPI/banking data.

Google Cloud launched Gemini Enterprise, a platform unifying models, governance, and a no-code workbench. It empowers employees to build AI agents to optimize factories and supply chains.

A new Zero-Click NTLM leak bypasses Microsoft's LNK patch, allowing unauthenticated NTLM hash theft on patched systems. The PoC works by exploiting UNC paths and the default shell32.dll icon reference.

Meta announced a $1.5B investment for a 1-gigawatt AI data center in El Paso, Texas, operational in 2028. It's part of a massive $72B CapEx plan to lead the global AI infrastructure race.

Building OS command injection payloads to save time in a CTF environment

Every breach starts with something small.
A missed patch. A link in an email. An unused control. A moment of inattention.

Phishing (MITRE ATT&CK T1566) is one of the most dominant and versatile initial access vectors for cybercriminals to exploit. Attackers use…

NOTE: In my past roles within Cyber Security, I assisted investigations / incident response initiatives where my role to provide some…