TL;DR Attackers are mass-scanning the internet for exposed Vite development servers. They abuse the Vite development server vulnerability CVE-2026-39364 to steal cloud credentials and config files…

TL;DR Threat actors are actively exploiting a critical flaw in the WooCommerce Wholesale Lead Capture plugin across thousands of websites. The weakness allows unauthenticated remote attackers to u…

Merhaba, global ölçekte faaliyet gösteren bir kuruluşta tespit etmiş olduğum Web Cache Deception (WCD) zafiyetini teknik açıdan paylaşmak…

Phase 3 of my cybersecurity homelab series and the troubleshooting story that turned out to be the real lesson

Microsoft has officially released the out-of-band Windows 11 KB5129195 update for versions 24H2 and 25H2. Administrators must deploy this emergency Windows 11 KB5129195 update quickly to resolve c…

TL;DR Cisco resolved five security flaws affecting its email gateways and management controllers. Four vulnerabilities carry critical CVSS scores of 9.8, allowing remote execution or access bypass…

TL;DR Cisco confirmed active attacks on a critical Cisco Secure Email Gateway vulnerability. Tracked as CVE-2026-76461, it scores a CVSS 9.8. An unauthenticated attacker can send a crafted email a…

Acronis Threat Research Unit researchers uncovered a state-linked espionage campaign exploiting a critical Gitea RCE vulnerability. A Chinese-speaking threat actor tracked as Red Heron weaponized …

Executive Summary Attackers are actively targeting two critical vulnerabilities in The Events Calendar to achieve remote code execution without authentication. The security flaws allow unauthentic…

A bot that was never in your group could hide code in a message, wait months, and fire when someone exports the chat. Telegram fixed the…

In the last part you learned to move around Linux and read files. Now we go one level up, to the commands that actually get security work…

Mastering Linux Navigation, File Dissection, and Command-Line Thinking

berapi-api

Password cracking in cybersecurity begins with accurately identifying the hash type. In this walkthrough, we will solve Level 1 and Level 2…

Everyone’s out here chasing live targets. Meanwhile I’m digging through an archived repo nobody’s touched in months, because why not. So…

Introduction

Introduction In this room, we are provided with a Python script that uses RSA encryption to secure a flag. Our task is to factorize the…

The room was structured around practical cybersecurity tasks, with each task focusing on a different area of security.

Lab Description

Understanding ethical hacking, how it helps protect organizations, and why cybersecurity skills are becoming increasingly valuable.