Exploring how a classic reconnaissance technique remains useful — and dangerous — in modern cybersecurity

Here’s How It Happened

This is a write-up for the “Hoasted Toasted” challenge during the 2025 Cyber Sentinel competition.

The general foundations that make up operating systems

As web applications grow in complexity, managing user authentication becomes both critical and challenging. That’s where Keycloak steps in…

Startups are building smarter tech — but often forgetting the basics: customer experience.

By Aditiya Widodo Putra, Cybersecurity & Blockchain Consultant

Using the LLMBus tool, I demonstrate how legacy models like GPT-3.5-Turbo can be manipulated with various methods.

I then created a reverse shell php payload and served it using python’s http server on my local system. I tried uploading it directly, however the application had some sort of validation mechanism in…

Bitcrook is an open-source intelligence apparatus that aims to centralize all of the tools necessary to carry out an investigation.

BFScan is a powerful tool to extract URLs, paths, and secrets from JAR, WAR, and APK files, generating raw HTTP requests and OpenAPI specs for security analysis.

Unauthenticated RCE flaw in Mitel SIP phones (CVSS 9.8) lets attackers gain root via ringtone upload. Exploit PoC shows full system compromise.

Five critical flaws (CVSS 9.8) in Blink routers allow unauthenticated remote root code execution via command injection in web server components.

Insikt Group reveals Predator spyware's resurgence, with new infrastructure, obfuscation, and a previously unreported customer in Mozambique, despite sanctions.

Anubis, a new RaaS, combines ECIES encryption with a "wipe mode" that permanently destroys files. It's actively targeting healthcare, construction, and engineering sectors.

Critical flaws (CVE-2025-6029, CVE-2025-6030) in KIA Ecuador key fobs allow remote vehicle unlocking and control via insecure learning code technology.

Katz Stealer, a new stealthy MaaS, is actively stealing data from browsers, crypto wallets, and apps, using advanced evasion tactics like steganography and Discord hijacking.

A high-severity flaw (CVE-2025-33108) in IBM BRMS for i allows users with specific capabilities to gain elevated privileges. Update to PTF SJ05907 (7.5) or SJ05906 (7.4).

HijackLoader and DeerStealer are surging, using ClickFix social engineering and sophisticated evasion to bypass defenses and exfiltrate sensitive data.

Censys uncovers "sostener.vbs," an obfuscated VBScript launching a multi-stage RAT delivery pipeline, affecting dozens and potentially linked to Blind Eagle APT.