Initial Reconnaissance

Transitioning from simple scripts to a professional-grade, multi-threaded port scanner.

Twitter threads are one of the best ways to grow your audience and share your knowledge. But trying to manually count characters and split…

939,329 attacks. 7 criminal campaigns. 101 countries. What a 21-day SSH honeypot revealed about who’s scanning the internet right now.

Introduction

Why Security Professionals Should Understand Modern C2 Frameworks

Aprende a identificar, explotar y mitigar vulnerabilidades DOM (XSS, CSPP y DOM Clobbering) con metodologías avanzadas de Bug Bounty.

Box:Anomaly
Difficulty: Medium
Vector: Active Directory

Introduction

Hello! This blog will be a continuation to the Infostealers 101 blog that we covered some time ago (as we’re going to see a different way…

The cyber threat landscape of 2026 has exposed a fundamental flaw in enterprise security: companies are defending their perimeters while…

At a Glance Actor or Group: Unnamed digital piracy networks Activity Type: Copyright infringement Targets or Victims: FIFA, official broadcasters, and viewers Scale: Nearly 400 internet domains se…

At a Glance Actor / group UNC5792 (linked to FSB Border Guards); UNC4221 (Russian military) Activity Phishing and account takeover via messaging device-linking abuse Targets U.S. and allied offici…

At a glance Malware Family: Backdoor.Mistic Threat Actor: Suspected Woodgnat (aka KongTuke) Target or Victims: Insurance, education, IT, and professional services Delivery Vector: DLL side-loading…

At least 39 rival malware families appear on a kill list used by a new Langflow cryptominer malware campaign. Threat actors now target exposed artificial intelligence application endpoints to brea…

What started as a routine security assessment turned into one of the most eye-opening findings I’ve encountered.

How to easily cheat the new Amazon Online Assessment 2026? I recently applied for Amazon and received an OA. But this time, instead of simply going through the entire test without any planning, why …

Welcome to Heist Files — a series on the biggest thefts, hacks, and frauds in finance, crypto, and tech. This is Episode 2.

How our Red Team breached the physical perimeter, weaponized a payload, and bypassed UAC to gain SYSTEM privileges.