1. Executive Summary

🚨 Brevo Supply Chain Attack: How One Stolen Cloudflare Key Exposed 100,000+ Websites

Imagine the pager goes off and the authentication log has grown by 40,000 lines overnight. Nobody is reading that by hand.

The business case for AI in cybersecurity is clear. The data supports it. Every industry is embedding AI into its operations, and the…

I’m Junaid Luqman, and I’m currently training to become a penetration tester. A few days ago, I sat down for one of the first real labs in…

What happens when your login request travels through an intermediary before reaching the server?

A few years into my career as a security engineer, I finished what I thought was the best pentest of my life. I had chained three separate…

Intro: The Wall

According to a recent alert dispatched to enterprise IT administrators within the Microsoft 365 Message Center, the Microsoft Edge browser will continue to support IE mode comprehensively until th…

So on another random day, I was hunting on a social media target and once my friend mentioned about javascript files that they can have…

Welcome to this new Medium post, in this one we are going to build a malware resurrector using Windows Credential Providers. The idea is…

The interesting failure had nothing to do with the model writing bad code. It had everything to do with where the model was standing.

TryHackMe Data Encoding Task 1: Introduction Text, like numbers and colors, is stored in memory as binary bits — a concept known as representation. To translate these numbers into readable text …

Enigma is an easy Linux machine on Hack The Box that requires chaining network file sharing, email enumeration, and local misconfigurations…

How a public javascript file led me to a phone verification bypass on a social media website So on another random day, I was hunting on a social media target and once my friend mentioned about …

Cadre Red Team — Établir un canal de commande et de contrôle SSH sur un lien Bluetooth, sans Wi-Fi ni infrastructure.

Every site has pages nobody linked to on purpose

Introduction

I’m officially CompTIA CySA+ certified! 🎉

Your password is not the prize anymore. Your active AI session is.