There are two truths I live by: one, always keep coffee within arm’s reach; two, curiosity + an API = bad decisions that turn into CVEs…

You scan once. You move on. You think you’re done……You’re not done. You’re just blind.

Executive Summary

After taking a short break from cybersecurity to focus on some life events, we’re back on CyberDefenders, solving a few of their free labs…

The most effective cybersecurity programs are built by small, elite teams operating with clarity, purpose, and the right leader at the…

SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the process of constructing and utilizing structures, assigning vari…

A critical vulnerability (CVE-2025-10680) in OpenVPN beta builds allows an unauthenticated attacker to execute arbitrary commands on Linux/macOS clients via DNS parameter injection.

The BiDi Swap attack exploits flaws in Unicode's bidirectional text rendering to make malicious URLs look legitimate, tricking users and bypassing browser security.

Google AI Studio introduced Vibe Coding, letting anyone generate functioning multimodal AI apps from a single text description, with Annotation Mode for editing.

KeePwn is a python script to help red teamers discover KeePass instances and extract secrets.

Cloudflare reported over 50% of human traffic is now quantum-resistant, countering the "harvest now, decrypt later" threat ahead of the 2030-2035 PQC mandate.

Microsoft is testing a new Windows 11 feature that prompts a quick memory diagnostic after a BSOD to detect hardware faults and improve system stability.

OpenAI released the GPT-OSS-SafeGuard models under Apache 2.0, enabling developers to apply custom safety policies at inference time with a transparent reasoning trace.

The Cameo celebrity platform sued OpenAI for trademark infringement over its Sora feature, arguing the name for AI-generated likenesses causes confusion and harms its brand.

Microsoft released a Liquid Glass UI update for its iOS apps, featuring a translucent, floating navigation bar that aligns with Apple's modern design language.

Grammarly has rebranded to Superhuman and launched Superhuman Go, a new AI assistant that unifies Grammarly, Superhuman Mail, and Coda for cross-app automation.

Meta Description: Microsoft released the KB5067036 preview fix for a two-year-old bug where "Update and Shut Down" unexpectedly caused a reboot instead of powering off.

Jenkins warned of a Critical SAML Plugin flaw (CVE-2025-64131) that allows session replay/hijacking due to a missing cache. Multiple plugins also expose API tokens in plaintext.

My name is Haruki Kira, and I’m a cybersecurity professional with about a year of hands-on experience. My journey into cybersecurity began…

Two years ago, I spent hours every day doing “productive” work — responding to emails, making presentations, scheduling meetings.  But then…

to solve this we need to decode the code from ROT13