For blockchain-based projects like Gonka, network security is crucial. The larger a network gets, the more attention it attracts —…

Most beginners think reconnaissance means running one command:

What if your browser could warn you before you walked into an online scam?

Google has released Chrome version 149 addressing multiple critical vulnerabilities, including several use-after-free flaws that could…

My 10 Strategies towards the OSCP+ First and foremost, some disclaimers: My background is in Security Operations and DFIR. The reason i ventured into Offensive Security was so that i could better …

Initial Reconnaissance

Transitioning from simple scripts to a professional-grade, multi-threaded port scanner.

Twitter threads are one of the best ways to grow your audience and share your knowledge. But trying to manually count characters and split…

939,329 attacks. 7 criminal campaigns. 101 countries. What a 21-day SSH honeypot revealed about who’s scanning the internet right now.

Introduction

Why Security Professionals Should Understand Modern C2 Frameworks

Aprende a identificar, explotar y mitigar vulnerabilidades DOM (XSS, CSPP y DOM Clobbering) con metodologías avanzadas de Bug Bounty.

Box:Anomaly
Difficulty: Medium
Vector: Active Directory

Introduction

Hello! This blog will be a continuation to the Infostealers 101 blog that we covered some time ago (as we’re going to see a different way…

The cyber threat landscape of 2026 has exposed a fundamental flaw in enterprise security: companies are defending their perimeters while…

At a Glance Actor or Group: Unnamed digital piracy networks Activity Type: Copyright infringement Targets or Victims: FIFA, official broadcasters, and viewers Scale: Nearly 400 internet domains se…

At a Glance Actor / group UNC5792 (linked to FSB Border Guards); UNC4221 (Russian military) Activity Phishing and account takeover via messaging device-linking abuse Targets U.S. and allied offici…

At a glance Malware Family: Backdoor.Mistic Threat Actor: Suspected Woodgnat (aka KongTuke) Target or Victims: Insurance, education, IT, and professional services Delivery Vector: DLL side-loading…

At least 39 rival malware families appear on a kill list used by a new Langflow cryptominer malware campaign. Threat actors now target exposed artificial intelligence application endpoints to brea…