Team: Team Not Found — Rank: #283 / 1237  Author: 0xAskar  — personal solves: 5 Web, 1 OSINT

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

This July, I earned my first ever bug bounty with no prior red team experience.

Author: Berend Watchus November 3, 2025 more case study findings

The future of secure software might not come from security engineers — but from AI itself.

By Minehli Arakelians Gheshlagh

Day 6 of 100: A few years ago, after a long night in the war room, a business lead looked at me and said, “I thought this was your job.” My…

Day 5 of 100: A client once told me, “We’ve bought every tool — and still don’t sleep well.” That’s when I shared the simple lens we use…

Goal

1. What Is DNS and Why It Matters

Author : Jawstar

After several attempts, I’d like to share a review of this certification, which in my opinion is the best one on the market to truly test…

The CompTIA Security+ is more than just an entry-level cert — it’s a gateway into the cybersecurity world. It tests your understanding of…

🛡️ Welcome to the World of Defensive Security!

Welcome to this write-up of Packet Puzzle.  A very short summary of how I proceeded and what I discovered:

Check Point found ChatGPT dramatically accelerates malware analysis, reducing XLoader's complex, multi-layered RC4 encryption decryption from days to hours. The AI breaks obfuscation and reveals C2 infrastructure.

Seqrite exposed Silent Lynx APT targeting Central Asia and Russia with Operation Peek-A-Baku. The group uses LNK files and GitHub to deploy Laplas reverse shells and SilentSweeper for espionage intelligence.

A serious Windows LPE flaw in DirectComposition allows local attackers to gain SYSTEM privileges by exploiting a type confusion bug leading to a controlled out-of-bounds write in kernel memory.

A flaw (CVE-2025-58726) allows SYSTEM privilege escalation via Kerberos authentication reflection using "Ghost SPNs" and disabled SMB signing. Patch immediately.

Rhysida ransomware is abusing Microsoft Trusted Signing to deploy OysterLoader (IAT) via Bing/Teams malvertising. The gang leveraged 40+ certificates to sign malware, bypassing security filters.

Perplexity launched Perplexity Patents, a free AI research agent that uses natural language to search complex patent data. Its citation-first model is designed to find prior art and enhance IP search transparency.