Recently, I was looking into the security configurations in one of my apps which is developed in Node.js and using Express.js to configure…

I’ve tried several P2P exchanges over the years, but few impressed me like Unigox. The platform is incredibly fast, secure, and easy to…

Replace .env with real secret management — before someone else finds it

The Information Systems Security Architecture Professional (ISSAP) certification from (ISC)² is not for those just starting out in…

Artificial Intelligence (AI) is not just another tech buzzword; it is a catalyst reshaping industries and redefining how we live and work…

Generative AI is no longer a futuristic experiment; it is a business reality. According to an IBM adoption survey, 82 % of organisations…

When we talk about Linux security, most people think of firewalls, sudo permissions, or file ownership.
But the real security story begins…

Shocker, while fairly simple overall, demonstrates the severity of the renowned Shellshock exploit, which affected millions of…

A High-severity LPE flaw (CVE-2025-60710) in the WindowsAI Recall Policy Configuration scheduled task allows local users to gain SYSTEM privileges via a symlink arbitrary delete attack.

When //admin is not the same as /admin, and why it matters.

Hello, I’m Kazi_Sabbir (0xNOXON) Two days before a physics exam I ditched studying and went hunting -.- called up my friend Shafayat Ahmed…

⏫ What is upgrade-insecure-requests?

🔒 What is Content-Security-Policy: trusted-types?

The Content-Security-Policy: style-src-elem directive is a modern, fine-grained control that specifically governs the allowed sources for…

A Complete Disaster (And What I Learned)

It sounds contradictory that two Cybersecurity Products can be used to bypass each other, but let me tell you a story of how I made it…

The goals for this cert are simple: learn, have fun, and enjoy the hacking process. No rabbit holes, No mind bogglers, Straight to the…

00:00:00 — January 9, 2022. Suddenly, North Korea’s internet vanishes.