From harmless curiosity to a full-blown cybersecurity awakening.

Iran-linked MuddyWater APT targeted 100+ government entities, using a compromised NordVPN mailbox and Phoenix v4 backdoor for stealthy espionage.

Starting Nov 3, all new Firefox extensions must declare if they collect user data in their manifest.json file for privacy and transparency.

Microsoft released a critical update disabling File Explorer preview for web downloads to patch a vulnerability that was leaking user NTLM authentication hashes.

AWS confirms its global outage was caused by a DynamoDB DNS automation race condition that wiped out service addresses, triggering a 15-hour cascade failure.

Fedora ratified a new AI policy mandating that contributors disclose all "significant" AI-generated code/content to ensure quality and human accountability.

CISA warned of 9 flaws in AutomationDirect PLCs. The Critical RCE (CVE-2025-61934, CVSS 10.0) allows unauthenticated file manipulation on a simulator service. Patch to v4.5.0.x immediately.

A weekend hack to learn about encryption and build my own POC that hides code from AV scanners using per-thread runtime encryption

En esta publicación detallo el proceso de resolución de la máquina NodeCeption de The Hackers Labs.  El objetivo es obtener acceso total…

Explore the essential commands and operators of SQL,the backbone of modern data management.

It started with a misplaced comma in a search bar. What I found was a live data hemorrhage.

MFA is essential. It is not a silver bullet. Real incidents often start from plain text leaks and session replay.

Bluetooth Low Energy (BLE) Protokol Yığınının Anatomisi

I’m a native French speaker, and I chose to build my career in cybersecurity.  But for a long time, I felt limited — closed off.  I knew I…

October 16, 2025

Let me take you back to my own hair-raising moment: a Sunday afternoon, coffee in hand, when I discovered my small business website had…

The digital world is constantly changing, and the adversaries are getting smarter every day. As cyber threats evolve, so too must our…

Quick update: I’ll be pausing my cybersecurity blogs until Nov 24 while I focus on finals.

Discover How Artificial Intelligence Makes Digital Spying Faster, Smarter, and More Dangerous Than Ever Before

Walkthrough for Tryhackme room Road

Microsoft released an emergency update for a critical WSUS flaw (CVE-2025-59287) that allows unauthenticated RCE and is already being actively exploited.