Using Windows Event Viewer and Sysmon Logs to Analyze Malware

In this piece, I’ll provide reasons why you should quit hunting on Hackerone and other interesting (potentially valuable?) information.

Artificial Intelligence is revolutionizing software development. Tools like GitHub Copilot, Amazon CodeWhisperer, and other AI-powered…

I created two challenges focused on AWS cloud security. A total of 89 participants took part in the competition, with zero solves for one…

Dean Alexander Buno, Calvin Zhang, Shakthi Vel Venkatesan

Surfshark Black Friday Sale 2025: Save up to 89% on premium VPN plans. Get Surfshark Starter from $1.69/mo. + 3 bonus months.

I watched this amazing video from the cybersecurity legend, Mikko Hyppönen: DEF CON 31 War Stories — Living Next Door to Russia — Mikko…

Building Signature + Heuristic Defenses for LLMs

This post is mostly for Cybersecurity students that want to improve their password cracking skills while participating in the NCL (National…

From our smartphones and smart home appliances to our WhatsApp chats and YouTube feeds, our lives are interconnected

Określenie to jest sygnałem o niedojrzałości w budowaniu cyberbezpieczenstwa i zespołów defensywnych.

Introduction: Classrooms have gone digital, but behind the glowing screens and smart boards lies a silent threat. Every click, every login…

burpgpt leverages the power of AI to detect security vulnerabilities that traditional scanners might miss. It sends web traffic

A trojanized npm package, https-proxy-utils, was found installing AdaptixC2, an open-source Cobalt Strike clone, on developers' machines.

Microsoft is testing Copilot Actions in Windows 11, enabling AI to manage local files, but warns of risks like cross-prompt injection.

Researchers unveil "Training Solo," a new Spectre-v2 study showing attackers can bypass isolation to self-train branch predictors and steal kernel data.

A new LFI zero-day (CVE-2025-11371) in CentreStack is actively exploited to bypass a previous RCE patch and steal credentials. Patch immediately.

Microsoft revoked over 200 digital certificates abused by Rhysida ransomware to spread malware disguised as legitimate Microsoft Teams installers via SEO poisoning.

A dark web post claims 3TB of data from two Russian SMS aggregators has been stolen, posing a huge risk of mass account takeover via 2FA codes.

A new phishing campaign is impersonating LastPass, Bitwarden, & 1Password to trick users into installing malware & stealing their master passwords.

Microsoft’s 2025 Digital Defense Report details a 32% rise in identity attacks, the weaponization of AI in phishing, and new state-sponsored tactics.