Fallos en autenticación, gestión de tokens JWT y mitigación. Detección de ataques de persistencia y fuerza bruta.

If you’ve ever popped a shell on a Windows network without firing a single exploit — chances are, you’ve witnessed the dark magic of NTLM…

A writeup for “Shock and Silence” on TryHackMe.

This alert walkthrough covers the full investigation of EventID 235, where a SQL Injection attempt was detected. Below is an enhanced and…

IAAA Failures

Most cybersecurity “labs” stop at screenshots and theory.

Let’s jump right into it. Below are some simple checklists that every individual or business should follow. These fundamentals help protect…

Learn how the web works, common website security risks, and protections for a safer internet.

It always happens the same way.

Pada 2024, Indonesia memiliki lebih dari 185 juta pengguna internet dan menghadapi ratusan juta serangan siber setiap tahun. Serangan…

The Model Context Protocol (MCP) is transforming how AI systems communicate, share data, and coordinate actions. From connecting LLMs to…

Learn how to properly report, escalate, and communicate about high-risk SOC alerts.

Explore and learn about the Django CVE-2025–64459 vulnerability.

One Piece is a medium difficulty room on TryHackMe that tests our enumeration, cryptography, and privilege escalation skills.

Ryūjin is a research-grade Bin2Bin protector/obfuscator with features like MiniVM (Hyper-V isolation), junk code insertion, anti-debug, and TrollReversers (BSOD).

The ransomware market fragmented into 85 active groups in Q3 2025. LockBit 5.0 resurfaced, but Check Point notes the landscape is now highly fluid and less predictable.

Amazon uncovered one of the largest npm supply-chain attacks: over 150,000 packages published to flood the registry and fraudulently earn TEA cryptographic tokens.

ASUS released firmware 1.1.2.3_1010 to fix a critical authentication-bypass flaw (CVE-2025-59367) in DSL-AC51, DSL-N16, and DSL-AC750 routers. Update immediately!

The Kubernetes community will retire Ingress NGINX by March 2026 due to technical debt and security flaws, compelling users to migrate to alternatives like the Gateway API.

A UK court rejected Microsoft’s argument that reselling perpetual Windows/Office licences breaches copyright due to clipart/fonts, upholding the resale legality.