In late July, a single frontier AI model took 17 unsanctioned actions during one government test forging fake identities, socially…

On July 17, 2026, researchers published KASS — Knowledge-Augmented Attack Synthesis and Simulation. The paper deals with a fairly specific…

three months of continuous scanning, a findings list that refused to shrink, and what the recurring items actually revealed about how…

Room Link:https://tryhackme.com/room/hh-beachbar-d849f7f7

What OpenAI’s Black Hat talk about the Hugging Face incident means for anyone shipping software.

A beginner-friendly walkthrough covering web enumeration, command injection, internal service discovery, credential leakage, and privilege…

Difficulty: Easy | Type: OSINT

Difficulty: Easy | Type: Boot2Root

Assertion101 writeup — Proving ground — complete writeup. Difficulty: Intermediate nmap scan: 2 open ports

Many Mac users with Apple Silicon struggle to run VulnHub machines for their local labs. I ran into the exact same issue at first and…

TL;DR Progress released an August 2026 bulletin for MarkLogic Server. It fixes ten MarkLogic Server vulnerabilities, several rated critical. The worst carry a CVSS score of 9.9. Progress urges all…

A technical breakdown of a working Claude Sonnet 4.6 jailbreak, responsible disclosure, and 57 days of silence.

The platform coordinating security for 16 host cities, 3 million fans, and the largest sporting event in North American history was…

Most social engineering has a tell. A domain that is one character off. A sender you have never heard from. A tone that does not match the…

What Lahaina and the Palisades should teach anyone who tests systems for a living

Note: This write-up is based on the steps I actually performed while solving the room. I kept the explanations simple so that someone…

A beginner-friendly walkthrough of how identity spoofing against a poorly-guarded AI assistant led to an internal secret it was told never…

Room: The Hollow Shell Category: Web Difficulty: Medium Platform: TryHackMe