How PR stereotypes clouded judgment long enough for a cybercriminal to slip through

In this article, we explored YARA, to demonstrate real-world YARA usage, we analyzed a batch-based dropper (.cmd) malware sample.

“This piece on streamlining BEC casework and cloud log analysis — was originally published on my website. I hadn’t shared it on Medium…

The story of Bloody Wolf is not the classic tale of a highly sophisticated threat actor deploying unknown zero-day exploits and…

Blockchain has long been celebrated for its security. Its immutability, transparency, and decentralized architecture make it theoretically…

Juego preguntas y respuestas (solo una por turno )

Simple reflected XSS vulnerability where unencoded HTML context allows direct JavaScript execution via a <script> payload.

For all its power, sqlmap does not have its own obfuscation mechanism. The injection payloads are sent “as is.” If the attacking target is…

JWT KID attack happens when the server dynamically loads the signing key using the kid value from the token header, without validating or…

A practical testing workspace combining checks, notes, and mindmaps.

Simple checks that led to real, high-impact vulnerability reports

You spent three months learning OWASP Top 10, completed 50+ PortSwigger labs, joined HackerOne with dreams of financial freedom, and…

ligolo-ng is one of the simplest and best pivoting tools we can use for purposes like port forwarding and tunneling, so let’s get started…

The era of cat and mouse in cybersecurity is ending. We are entering an era of machine versus machine. The emergence of AI-driven malware…

Dear Reader,

As more organizations aim to qualify as suppliers for Saudi Aramco, a clear understanding of Aramco’s cybersecurity structure has become…

*image by GPT Image

How did I overcome the fear of an interview?

If your PC feels slow, unsafe, or constantly bombarded with security alerts, you’re not alone. Cyber threats have become smarter and more…

Contrary to popular beliefs, compliance with EN 18031 is not a one-time activity. While it is true that the Radio Equipment Directive —…