MongoDB has patched two flaws: CVE-2025-6713 (CVSS 7.7) allows privilege escalation via $mergeCursors, and CVE-2025-6714 (CVSS 7.5) causes mongos DoS.

Disclaimer: This article is purely for educational purposes. All bugs have been reported through responsible disclosure.

After a long break from writing blogs, I decided to come back for a little chat. We are currently seeing more of State APTs from all…

(And You Don’t Even Know It)

Case Study: Securing a Seven-Node Star Topology — A Practical Network Security Assessment

In the world of web security, there are loud vulnerabilities like SQL injection or XSS — and then there are quiet ones like HTTP Parameter Pollution (HPP) that break your app's logic without making a…

In the past, cyber threats were mostly manual. A human attacker wrote a phishing email, someone clicked, and damage followed. But now?

Welcome to Day 39 of #60DaysofGRC!

As a cybersecurity professional, the rapid growth of technology is something we must keep up with within our organization, as well as…

Google is fined $314 million for surveilling Android users, and the International Criminal Court suffers a cyberattack

“They didn’t need to break in. They logged in… and escalated from there.”

Like many developers, I used to rely on a mix of apps to manage my digital life. One app for 2FA codes, another for storing passwords, a…

Many Kiwi businesses assume their IT provider handles all aspects of security. But penetration testing, a specialised service performed by…

Microsoft Edge's UI now loads in under 300ms (FCP), thanks to WebUI 2.0. This boosts responsiveness, making features like settings and split screen appear almost instantly.

Account Takeover (ATO) is when an attacker gains unauthorized access to someone’s account using weaknesses in the login or password reset…

By Gouri Sankar A ~

Have you ever been curious about what really happens on the dark web?

🧾 Command-Line Techniques Write-Up (Windows | Beginner CTF)

I’ve spent the last one decade tracing hackers, hardening billion-dollar infrastructures, and dissecting the darkest corners of the…

An unexpected lesson from a school janitor and the eternal battle between “don’t fix what ain’t broken” and “there’s always room for…