This is part of my daily labs in preparation for OSCP. I am documenting everything I am learning, tools that I am using and reflections as…

Introduction to Ethical Hacking

A practical walkthrough of breaking vulnerable queries, mapping database schemas, and securing application code with prepared statements.

Hello Everyone,

Every time you log into a website, your password is never actually stored anywhere on the server, at least, not in the form you typed it…

Not every security vulnerability requires advanced hacking skills.

A VPN gateway frequently serves as the primary portal into corporate networks. Consequently, malicious actors relentlessly target these vital security checkpoints. During the summer of 2026, cyber…

This lab uses web messaging and parses the message as JSON.

Change one number in a web address, and suddenly you’re looking at someone else’s private data. No exploit code required.

At a glance Threat actor Project CAV3RN cluster; linked to OilRig (APT34) with low confidence Activity type Cyberespionage; modular framework with a new Microsoft Graph C2 module Targets / victims…

OEMs Discuss Secure Boot Challenges Last week, Microsoft invited enterprise IT administrators to a technical community exchange. They discussed the complex UEFI CA 2023 certificate update. Represe…

European cloud provider OVH just published a candid retrospective on its emergency patch campaign. The post explains how it fixed a KVM virtualization flaw in under ten days. The scale was enormou…

At a glance Malware family TuxBot v3 Evolution (also tracked as Akiru) Threat actor Suspected link to the Keksec ecosystem; no confirmed named actor Target / victims IoT devices across 30+ device …

Initial Attack Details The renowned open-source private cloud software, Nextcloud, suffered a cyberattack yesterday morning. This incident occurred around 7:00 AM on July 20th. Currently, the prec…

Anthropic quietly reshaped its Claude Team offering this week. The update lowers the entry barrier rather than the price. Until now, the plan demanded at least five seats. Going forward, it asks f…

At a Glance Actor Russian-speaking solo actor using the handle “bandcampro” Activity type AI-assisted C&C botnet, password attacks, fraud planning Targets Eight PCs at a dental cli…

At a glance Malware family ClickLock Stealer (new, named by Group-IB) Threat actor Unattributed. No actor or group named. Target / victims macOS users, especially crypto holders. At least 100 vict…