Bu makine, siber güvenliğin en yaygın ve en kritik zafiyetlerinden biri olan Dosya Yükleme (File Upload) açıklarını hedef alıyor. Basit bir…

As part of my Ethical Hacking course with ParoCyber, I was given a practical assignment that required me to step into the role of an…

What a miserable day to write a medium blog, But I will do whatever to keep myself busy nowdays, even if it means discussing a topic no one…

Day 5 switches gears from AI and Splunk back to something brutally simple and very real-world: broken access control. The room is called…

A complete beginner-friendly roadmap to access bonuses and benefits from X.

China-linked APT UNC5174 is using a Go-based backdoor that abuses the Discord API as a covert C2 channel. This method allows the lightweight malware to execute arbitrary commands and evade traditional firewall monitoring.

The support team at TryPresentMe start receiving calls from parents who can’t activate vouchers, and report targeted phishing…

Day 4 of Advent of Cyber 2025 introduces AI in security through Van SolveIT, an AI assistant that helps with exploit generation, log…

For years, cybersecurity felt predictable. Fix your injections, audit your supply chain, lock down APIs, patch your libraries, and you were…

In the world of cryptocurrency, trust is everything. People entrust exchanges with not only their funds, but also their identities, their…

[Series Link] :- https://www.vulnhub.com/series/dc,199/

We know hows its going: write the code, compile, run. Our execution begins at main()? No, that’s an illusion — a convenient fiction. The…

How a sick dog cost me my first exam (and how a little humanity saved my certification).

Information disclosure occurs when a website unintentionally exposes sensitive data to unauthorized users. This data can be directly…

On Nov 10, 2025, The Hacker News published a startling summary of the 2025 Browser Security Report: the modern web browser has quietly…

How I’m building a small-scale SOC lab using Wazuh, Zeek to explore alert correlation

Reading about the AI influence we can learn much, so i recommend you to read it.

APIs are everywhere mobile apps, banking systems, social platforms, cloud services yet many people only hear about them when something goes…

Your complete tutorial for maximizing X opportunities this December.

A Catastrophic (CVSS 10.0) Auth Bypass flaw (CVE-2025-44005) in Step CA's ACME/SCEP provisioners allows unauthenticated attackers to issue fraudulent certificates and access restricted infrastructure. Update to v0.29.0.

Introduction