In this challenge from TryHackMe’s Advent of Cyber, I used Splunk to investigate a simulated attack against a web server. The goal was to…

Enumeration is one of the most critical phases in any penetration test. It’s the process of systematically gathering detailed information…

Splunk Basics — Did you SIEM?

Complete Walkthrough & Learning Guide

Check out Magic Internet Money’s points program and earn extra rewards efficiently.

Before a security review, audit or board meeting, you usually collect logs, reports and scanner outputs. What is often missing is a simple…

TryHackMe Room: Linux CLI AOC 2025

The call usually comes at night.

Making Sense of the GDPR Wherever a company operates, its privacy obligations rarely stop at the national border; understanding how the GDPR affects your business is crucial. #BusinessOperations …

Difficulty: Easy

The Call for Speakers (CFS) for CVE/FIRST VulnCon 2026 closes on December 22, 2025. VulnCon 2026 will be held on April 13–16, 2026, at the…

CVE-2025–55182 and CVE-2025–66478

The final outcome of most penetration tests is the report, and it is often the part dreaded most by the consultants carrying out the test…

Autor: Santiago Habib
 Fecha: Diciembre 2025

The scariest cyber threats aren’t always hackers — sometimes they’re one careless keystroke away.

Category: Web | Difficulty: Easy (But I think it should be a Medium Difficulty :) )

Discover how to access and benefit from the latest x reward program.

Koi Security exposed ShadyPanda, which infected 4.3M+ users by weaponizing trusted browser extensions (WeTab, Clean Master) through auto-updates. The malware performs RCE and exfiltrates data to China.

Zscaler exposed Matanbuchus v3.0, a MaaS downloader pivoting to ransomware. The stealthy C++ malware uses Protobufs for C2, QuickAssist for access, and time-wasting loops to bypass sandboxes.

A 3-flaw chain (CRLF, Auth Bypass, SQLi) achieves root RCE on Synology BeeStation. The exploit uses a "Dirty File Write" SQLi to inject a malicious crontab entry, bypassing the lack of a PHP interpreter.

Trend Micro exposed Water Saci, a campaign using LLMs to convert malware from PowerShell to Python, accelerating its spread via a WhatsApp worm. The multi-stage attack deploys a trojan capable of VNC mirroring and overlay attacks.