Why AI Automation in Pentesting Matters (Right Now)

The recent global disruption of Cloudflare services raises essential discussions regarding resilience and systemic risk that go far beyond…

Subject: Deep Dive into the SHA1-HULUD npm Supply Chain Worm

This is actually the first write-up I’ve done on my Medium blog for a HTB Labs machine. Up until now, I usually just cracked boxes and…

Why relying on human eye isn’t enough and how to automate detection using Regex. By UObioma Felicity

In October 2025, a congressionally chartered commission delivered a verdict that should have made national news. For the first time since…

Three months ago, I was staring at yet another spreadsheet that refused to end. It held 476 rows of risks, controls, evidence dates…

Modern agriculture has transformed into a high-tech endeavor. GPS-guided tractors plow precise furrows, drones survey crops, and sensors…

Why technology alone can’t save your organization and how to spot the attacks that firewalls miss. By Uzoh Obioma Felicity

In production environments, exposing a database port directly to the internet is a serious security risk.
 Attackers routinely scan for…

Different industries take different approaches to providing guidance to everyday people. In the automotive world the messaging is clear and…

Day 6 takes us into one of my favourite corners of security: malware analysis.

From Google Antigravity to Claude: How Indirect Prompt Injection turns helpful bots into data thieves.

How I discovered two HTML injection vulnerabilities in AT&T’s website URL parameters, what the business impact was, and how issues like…

Malware Analysis- Egg-xecutable

Discover some common tooling for malware analysis within a sandbox environment

IDOR — Santa’s Little IDOR

How a beginner’s scan of localhost is the most crucial step you'll ever take.

By Lynet Svotwa

How consistent posting and short updates help me build reach and earn every single day.

In a recent penetration tester interview, I was given the login page at testphp.vulnweb.com/login.php and asked to evaluate it on the spot…